# changelog

author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.52.0-3
changelog:
  - Invalid memory access on Dnsconfd DBUS error (RHEL-84692)
  - Support IP configuration for secondary interfaces on Oracle VM from metadata (RHEL-84695)


author: Wen Liang <wenliang@redhat.com> - 1:1.52.0-4
changelog:
  - ovs: allow reapplying ovs-bridge and ovs-port properties (RHEL-87595)
  - core: ovs: fix NULL pointer dereference in ovsdb read timeout callback (RHEL-87347)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28230


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/58af1cd)


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Peter Hunt <pehunt@redhat.com> - 3:2.231.0-6.rhaos4.18
changelog:
  - carry https://github.com/containers/container-selinux/pull/329 as well
  - but only the policy change, not the version change


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: USHIFT-3173


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 3.1.0-2
changelog:
  - Allow the monitor to watch directories with label container_var_run_t
    Resolves: KATA-2116
  - Update ccv0.patch
    Resolves: KATA-1944


author: Emanuel Lima <emlima@redhat.com> - 3.7.0-3.rhaos4.18
changelog:
  - Add binutils as a dependency
    Sync branch with rhaos4.17:
    kata-containers-3.7.0
    Bump QEMU to 8.2
    Fully remove the `containerd-shim-kata-v2-tp` binary
    Drop AIO mode fix for QEMU
    add "io.kubernetes.cri-o.Devices" to cri-o config


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202505290612.p0.gfadb78e.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/fadb78e720779ed1b29f32170f3e9dd32584a7e6


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202505121540.p0.g75653ac.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/openshift-ansible/commit/75653ac296666ef399254d5d0bfd9c3fc98be0c0


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202505210330.p0.g8f1c8b5.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/oc/commit/8f1c8b5768cdff8885ddef28e10de2c1928daf92


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202505121540.p0.g425c1c5.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/cloud-provider-aws/commit/425c1c5be39628421bdfb63caf25beb169307473


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202505121540.p0.g7109d6b.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/cloud-provider-azure/commit/7109d6b4eaefda87b235c88b92c2e17fd3dd0117


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202505121540.p0.gd8d3aeb.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/cloud-provider-gcp/commit/d8d3aeba536f4c9f6593a08045466f06dc7406ff


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/d3d8756)
  - Related: OCPBUGS-42897


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [openshift-4.19]"
  - Resolves: OCPBUGS-52932


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2.rhaos4.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [openshift-4.19]"
  - Resolves: OCPBUGS-52552


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3.rhaos4.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "Podman container libpod/tmp/persist directories not cleaned up, fill up tmpfs"
  - Resolves: OCPBUGS-54809


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4.rhaos4.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - this fixes build for OCP


author: Zdenek Pytela <zpytela@redhat.com> - 35.1.46-1
changelog:
  - Label /run/modprobe.d with modules_conf_t
  Resolves: RHEL-61453
  - Allow boothd connect to kernel over a unix socket
  Resolves: RHEL-57104
  - Allow boothd connect to systemd-userdbd over a unix socket
  Resolves: RHEL-57104
  - Additional updates stalld policy for bpf usage
  Resolves: RHEL-57075
  - Update stalld policy for bpf usage
  Resolves: RHEL-57075
  - Allow ptp4l the sys_admin capability
  Resolves: RHEL-55133
  - Label /dev/hfi1_[0-9]+ devices
  Resolves: RHEL-54996
  - Confine iio-sensor-proxy
  Resolves: RHEL-17346


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.47-1
changelog:
  - Label /etc/sysctl.d and /run/sysctl.d with system_conf_t
  Resolves: RHEL-56988
  - Allow lldpad create and use netlink_generic_socket
  Resolves: RHEL-61832
  - Allow unconfined_t execute kmod in the kmod domain
  Resolves: RHEL-54710
  - Allow confined users r/w to screen unix stream socket
  Resolves: RHEL-50379
  - Label /root/.screenrc and /root/.tmux.conf with screen_home_t
  Resolves: RHEL-50375
  - Allow iio-sensor-proxy the bpf capability
  Resolves: RHEL-17346


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.48-1
changelog:
  - Revert "Allow unconfined_t execute kmod in the kmod domain"
  Resolves: RHEL-65008
  - Add policy for /usr/libexec/samba/samba-bgqd
  Resolves: RHEL-53124


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.49-1
changelog:
  - Update virtlogd policy
  Resolves: RHEL-69433
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-56955
  - Allow qemu-ga the dac_override and dac_read_search capabilities
  Resolves: RHEL-52476
  - Allow ip the setexec permission
  Resolves: RHEL-62923
  - Allow alsa get attributes filesystems with extended attributes
  Resolves: RHEL-61472
  - Allow bacula execute container in the container domain
  Resolves: RHEL-21168
  - Allow httpd get attributes of dirsrv unit files
  Resolves: RHEL-46808
  - Update samba-bgqd policy
  Resolves: RHEL-69517
  - Allow samba-bgqd read cups config files
  Resolves: RHEL-69517
  - Update policy for samba-bgqd
  Resolves: RHEL-69517
  - Update bootupd policy for the removing-state-file test
  Resolves: RHEL-66584
  - Allow qatlib search the content of the kernel debugging filesystem
  Resolves: RHEL-53864
  - Allow qatlib connect to systemd-machined over a unix socket
  Resolves: RHEL-53864
  - Update qatlib policy for v24.02 with new features
  Resolves: RHEL-53864


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.50-1
changelog:
  - Allow auditctl signal auditd
  Resolves: RHEL-68969
  - Fix the cups_read_pid_files() interface to use read_files_pattern
  Resolves: RHEL-69517
  - Dontaudit systemd-coredump the sys_resource capability
  Resolves: RHEL-46339
  - Allow rpcd read network sysctls
  Resolves: RHEL-1558
  - Allow irqbalance setpcap capability in the user namespace
  Resolves: RHEL-69564
  - Allow traceroute_t bind rawip sockets to unreserved ports
  Resolves: RHEL-54561
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-56955
  - Change /run/sysctl\.d(/.*)? fc entry to /var/run/sysctl\.d(/.*)?
  Resolves: RHEL-56988
  - Exclude container-selinux manpage from selinux-policy-doc
  Resolves: RHEL-69916


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.51-1
changelog:
  - Allow rsyslog read systemd-logind session files
  Resolves: RHEL-73839
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  Resolves: RHEL-72860
  - Allow svirt_t read sysfs files
  Resolves: RHEL-70839
  - Allow xdm dbus chat with power-profiles-daemon
  Resolves: RHEL-61117
  - Update power-profiles-daemon policy
  Resolves: RHEL-61117
  - Confine power-profiles-daemon
  Resolves: RHEL-61117
  - Allow virtqemud domain transition to nbdkit
  Resolves: RHEL-56029
  - Add nbdkit interfaces defined conditionally
  Resolves: RHEL-56029
  - Confine the switcheroo-control service
  Resolves: RHEL-24268


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.52-1
changelog:
  - Add the files_read_root_files() interface
  Resolves: RHEL-70849
  - Dontaudit systemd-logind remove all files
  Resolves: RHEL-59145
  - Add the files_dontaudit_read_all_dirs() interface
  Resolves: RHEL-59145
  - Add the files_dontaudit_delete_all_files() interface
  Resolves: RHEL-59145
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77152
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-1556
  - Backport bootupd policy from current Fedora rawhide
  Resolves: RHEL-70849
  - Support using systemd containers
  Resolves: RHEL-76352
  - Allow svirt_t connect to unconfined_t over a unix domain socket
  Resolves: RHEL-37539
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-1379
  - Allow telnetd read network sysctls
  Resolves: RHEL-58825
  - Allow alsa watch generic device directories
  Resolves: RHEL-61472
  - Update switcheroo policy
  Resolves: RHEL-24268


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.53-1
changelog:
  - Allow svirt_t to connect to nbdkit over a unix stream socket
  Resolves: RHEL-56029
  - Allow power-profiles-daemon the bpf capability
  Resolves: RHEL-61117
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-76352


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/d0a0f1a)
  - Resolves: RHEL-28235


author: Jindrich Novy <jnovy@redhat.com> - 2:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [openshift-4.19]"
  - Resolves: OCPBUGS-52933


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202506131600.p0.gd7c4c0b.assembly.4.19.0
changelog:
  - Update to source commit https://github.com/openshift/microshift/commit/d7c4c0b44345cfa11446ceae466f3c6f2b42228e


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.14.1.el9_6]
changelog:
  - smb: client: fix regression with guest option (Paulo Alcantara) [RHEL-83859]
  - io_uring/sqpoll: zero sqd->thread on tctx errors (CKI Backport Bot) [RHEL-87264] {CVE-2025-21633}
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Chris Leech) [RHEL-86915] {CVE-2025-21927}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86840] {CVE-2025-21993}
  - certs: Add ECDSA signature verification self-test (Herbert Xu) [RHEL-82247]
  - certs: Move RSA self-test data to separate file (Herbert Xu) [RHEL-82247]
  - certs: Break circular dependency when selftest is modular (Herbert Xu) [RHEL-82247]
  - KEYS: Include linux/errno.h in linux/verification.h (Herbert Xu) [RHEL-82247]
  - crypto: certs: fix FIPS selftest dependency (Herbert Xu) [RHEL-82247]
  - New configs in certs/Kconfig (Fedora Kernel Team) [RHEL-82247]
  - certs: Add support for using elliptic curve keys for signing modules (Herbert Xu) [RHEL-82247]
  - certs: Trigger creation of RSA module signing key if it's not an RSA key (Herbert Xu) [RHEL-82247]
  - tpm: Change to kvalloc() in eventlog/acpi.c (Štěpán Horáček) [RHEL-82147] {CVE-2024-58005}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.15.1.el9_6]
changelog:
  - ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-86021]
  - ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-86021]
  - ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-86021]
  - ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-86021]
  - ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-86021]
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-86021]
  - ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-86021]
  - ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-86021]
  - ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-86021]
  - ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-86021]
  - ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-86021]
  - ice: Align E810T GPIO to other products (Petr Oros) [RHEL-86021]
  - ice: Add SDPs support for E825C (Petr Oros) [RHEL-86021]
  - ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-86021]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.16.1.el9_6]
changelog:
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Jared Kangas) [RHEL-88252] {CVE-2024-58007}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Jared Kangas) [RHEL-88252]
  - soc: qcom: Add check devm_kasprintf() returned value (Jared Kangas) [RHEL-88252]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.17.1.el9_6]
changelog:
  - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89113] {CVE-2025-21756}
  - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89113] {CVE-2025-21756}
  - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89113] {CVE-2025-21756}
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Guillaume Nault) [RHEL-89646] {CVE-2025-37749}
  - cgroup/cpuset: Add warnings to catch inconsistency in exclusive CPUs (Waiman Long) [RHEL-88640]
  - selftest/cgroup: Add a remote partition transition test to test_cpuset_prs.sh (Waiman Long) [RHEL-88640]
  - selftest/cgroup: Clean up and restructure test_cpuset_prs.sh (Waiman Long) [RHEL-88640]
  - selftest/cgroup: Update test_cpuset_prs.sh to use | as effective CPUs and state separator (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Code cleanup and comment update (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Remove remote_partition_check() & make update_cpumasks_hier() handle remote partition (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Fix race between newly created partition and dying one (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Fix spelling errors in file kernel/cgroup/cpuset.c (Waiman Long) [RHEL-88640]
  - selftest/cgroup: Make test_cpuset_prs.sh deal with pre-isolated CPUs (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: Account for boot time isolated CPUs (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: remove use_parent_ecpus of cpuset (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: remove fetch_xcpus (Waiman Long) [RHEL-88640]
  - selftest/cgroup: Add new test cases to test_cpuset_prs.sh (Waiman Long) [RHEL-88640]
  - cgroup/cpuset: remove child_ecpus_count (Waiman Long) [RHEL-88640]
  - cpuset: use Union-Find to optimize the merging of cpumasks (Waiman Long) [RHEL-88640]
  - Union-Find: add a new module in kernel library (Waiman Long) [RHEL-88640]
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CKI Backport Bot) [RHEL-86899] {CVE-2025-21966}
  - ixgbe: fix media type detection for E610 device (Corinna Vinschen) [RHEL-85809]
  - ixgbevf: Add support for Intel(R) E610 device (Corinna Vinschen) [RHEL-85809]
  - PCI: Add PCI_VDEVICE_SUB helper macro (Corinna Vinschen) [RHEL-85809]
  - ixgbe: fix media cage present detection for E610 device (Corinna Vinschen) [RHEL-85809]
  - ixgbe: Enable link management in E610 device (Corinna Vinschen) [RHEL-85809]
  - ixgbe: Clean up the E610 link management related code (Corinna Vinschen) [RHEL-85809]
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection (Corinna Vinschen) [RHEL-85809]
  - ixgbe: Add support for EEPROM dump in E610 device (Corinna Vinschen) [RHEL-85809]
  - ixgbe: Add support for NVM handling in E610 device (Corinna Vinschen) [RHEL-85809]
  - ixgbe: Add link management support for E610 device (Corinna Vinschen) [RHEL-85809]
  - ixgbe: Add support for E610 device capabilities detection (Corinna Vinschen) [RHEL-85809]
  - ixgbe: Add support for E610 FW Admin Command Interface (Corinna Vinschen) [RHEL-85809]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.18.1.el9_6]
changelog:
  - gitlab-ci: use rhel9.6 builder image (Michael Hofmann)
  - cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87921] {CVE-2025-21964}
  - Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (David Marlin) [RHEL-85647]
  - drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode (Jocelyn Falempe) [RHEL-85393]
  - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation (Jocelyn Falempe) [RHEL-85393]
  - drm/i915/display: Use joined pipes in dsc helpers for slices, bpp (Jocelyn Falempe) [RHEL-85393]
  - drm/i915/display: Use joined pipes in intel_mode_valid_max_plane_size (Jocelyn Falempe) [RHEL-85393]
  - drm/i915/display: Use joined pipes in intel_dp_joiner_needs_dsc (Jocelyn Falempe) [RHEL-85393]
  - drm/i915/display: Simplify intel_joiner_num_pipes and its usage (Jocelyn Falempe) [RHEL-85393]
  - drm/i915/display: Check whether platform supports joiner (Jocelyn Falempe) [RHEL-85393]
  - Revert "drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation" (Jocelyn Falempe) [RHEL-85393]
  - Revert "drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible mode" (Jocelyn Falempe) [RHEL-85393]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.19.1.el9_6]
changelog:
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87254] {CVE-2022-3424}
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89546] {CVE-2025-21764}
  - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89546] {CVE-2025-21765}
  - net: add dev_net_rcu() helper (Xin Long) [RHEL-89546] {CVE-2025-21765}
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-84151]
  - page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-84151]
  - ext4: fallback to complex scan if aligned scan doesn't work (Jay Shin) [RHEL-85984]
  - drm/mgag200: Added support for the new device G200eH5 (Jocelyn Falempe) [RHEL-88907]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.20.1.el9_6]
changelog:
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93253] {CVE-2025-37943}
  - ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87985] {CVE-2025-37785}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.21.1.el9_6]
changelog:
  - xsk: fix an integer overflow in xp_create_and_assign_umem() (CKI Backport Bot) [RHEL-87911] {CVE-2025-21997}
  - vlan: enforce underlying device type (Guillaume Nault) [RHEL-87884] {CVE-2025-21920}
  - net: fix geneve_opt length integer overflow (Guillaume Nault) [RHEL-87974] {CVE-2025-22055}
  - net: gso: fix ownership in __udp_gso_segment (CKI Backport Bot) [RHEL-88333] {CVE-2025-21926}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.22.1.el9_6]
changelog:
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87890] {CVE-2025-21969}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (David Marlin) [RHEL-87890] {CVE-2025-21969}
  - Revert "SUNRPC: Revert e0a912e8ddba" (Benjamin Coddington) [RHEL-94811]
  - mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Jay Shin) [RHEL-92291]
  - mm: fix crashes from deferred split racing folio migration (Jay Shin) [RHEL-92291] {CVE-2024-42234}
  - mm: memcg: fix split queue list crash when large folio migration (Jay Shin) [RHEL-92291]
  - proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86808] {CVE-2025-21999}
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87941] {CVE-2025-21963}
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (CKI Backport Bot) [RHEL-87931] {CVE-2025-21979}
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy (CKI Backport Bot) [RHEL-87931] {CVE-2025-21979}
  - eth: bnxt: fix truesize for mb-xdp-pass case (CKI Backport Bot) [RHEL-88328] {CVE-2025-21961}
  - vmxnet3: unregister xdp rxq info in the reset path (CKI Backport Bot) [RHEL-92471]
  - md: fix mddev uaf while iterating all_mddevs list (CKI Backport Bot) [RHEL-89062] {CVE-2025-22126}
  - nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-91163]
  - nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-91163]
  - media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-90323]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-90323]
  - media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-90323]
  - media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-90323]
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-86302]
  - smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94460] {CVE-2025-37750}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.23.1.el9_6]
changelog:
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94248] {CVE-2025-37738}
  - ibmvnic: Use kernel helpers for hex dumps (CKI Backport Bot) [RHEL-89019] {CVE-2025-22104}
  - ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-88310] {CVE-2025-21883}
  - ice: Fix deinitializing VF in error path (CKI Backport Bot) [RHEL-88310] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (CKI Backport Bot) [RHEL-88310] {CVE-2025-21883}
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-88322] {CVE-2025-21919}
  - redhat: configs: Enable CX231XX driver (Kate Hsuan) [RHEL-89730]
  - media: usb: usbtv: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-89730]
  - media: saa6752hs: Don't set format in sub-device state (Kate Hsuan) [RHEL-89730]
  - media: i2c: Use accessors for pad config 'try_*' fields (Kate Hsuan) [RHEL-89730]
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93629] {CVE-2025-23150}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202506161416.p0.ga36c41d.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/a36c41df567e20318d8141b629b31418572f8968


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202506161807.p0.gfa1fd95.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/oc/commit/fa1fd955cefab1204764bc98d754ed855ba6dca4


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.24.1.el9_6]
changelog:
  - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93465] {CVE-2023-52933}
  - net/mlx5: Fill out devlink dev info only for PFs (CKI Backport Bot) [RHEL-93770]
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89487]
  - dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89487]
  - dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89487]
  - dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89487]
  - NFS: O_DIRECT writes must check and adjust the file length (Benjamin Coddington) [RHEL-96060]
  - pnfs/flexfiles: retry getting layout segment for reads (Benjamin Coddington) [RHEL-96060]
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Benjamin Coddington) [RHEL-96060]
  - x86/tsc: Use topology_max_packages() to get package number (David Arcari) [RHEL-96886]
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-97519]


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6.rhaos4.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9811294)
  - fixes "CVE-2025-6032 podman: podman missing TLS verification [openshift-4.19]"
  - Resolves: OCPBUGS-57403


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.25.1.el9_6]
changelog:
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99124] {CVE-2022-49846}
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97110] {CVE-2025-37799}
  - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-95252]
  - ipv6: mcast: extend RCU protection in igmp6_send() (CKI Backport Bot) [RHEL-94673] {CVE-2025-21759}
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CKI Backport Bot) [RHEL-93445] {CVE-2025-21887}
  - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93132] {CVE-2025-22004}
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-92268]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202507010638.p0.g106d040.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/106d0409dd6b36020d8a12ea5ca00ce97ac986ed


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202506301438.p0.g298429b.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/oc/commit/298429ba9831d1d72b89edd9beb82a6ee665c3b7


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.26.1.el9_6]
changelog:
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98996] {CVE-2025-21991}
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-90212]
  - smb: client: fix perf regression with deferred closes (Paulo Alcantara) [RHEL-97482]
  - smb3 client: fix open hardlink on deferred close file error (Paulo Alcantara) [RHEL-97482]
  - Fix mmu notifiers for range-based invalidates (Jay Shin) [RHEL-93743]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-88275]
  - vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-88275]
  - mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-88275]
  - vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-88275]
  - vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-88275]
  - vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-88275]
  - vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-88275]
  - vfio/pci: Fallback huge faults for unaligned pfn (Donald Dutile) [RHEL-85623]
  - vfio/pci: implement huge_fault support (Donald Dutile) [RHEL-85623]
  - vfio/pci: Remove unused struct 'vfio_pci_mmap_vma' (Donald Dutile) [RHEL-85623]
  - vfio/pci: Insert full vma on mmap'd MMIO fault (Donald Dutile) [RHEL-85623]
  - vfio/pci: Use unmap_mapping_range() (Donald Dutile) [RHEL-85623]
  - mm/arm64: support large pfn mappings (Donald Dutile) [RHEL-85623]
  - mm/x86: support large pfn mappings (Donald Dutile) [RHEL-85623]
  - mm: remove follow_pte() (Donald Dutile) [RHEL-85623]
  - mm: follow_pte() improvements (Donald Dutile) [RHEL-85623]
  - mm/access_process_vm: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - vfio: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - mm/x86/pat: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - s390/pci_mmio: use follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - KVM: use follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - mm: pass VMA instead of MM to follow_pte() (Donald Dutile) [RHEL-85623]
  - mm: move follow_phys to arch/x86/mm/pat/memtype.c (Donald Dutile) [RHEL-85623]
  - mm: fix follow_pfnmap API lockdep assert (Donald Dutile) [RHEL-85623]
  - mm: new follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - mm: remove follow_pfn (Donald Dutile) [RHEL-85623]
  - mm: always define pxx_pgprot() (Donald Dutile) [RHEL-85623]
  - mm/huge_memory: check pmd_special() only after pmd_present() (Donald Dutile) [RHEL-85623]
  - mm/fork: accept huge pfnmap entries (Donald Dutile) [RHEL-85623]
  - mm/pagewalk: check pfnmap for folio_walk_start() (Donald Dutile) [RHEL-85623]
  - mm/gup: detect huge pfnmap entries in gup-fast (Donald Dutile) [RHEL-85623]
  - mm: mark special bits for huge pfn mappings when inject (Donald Dutile) [RHEL-85623]
  - mm: drop is_huge_zero_pud() (Donald Dutile) [RHEL-85623]
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud (Donald Dutile) [RHEL-85623]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202507041538.p0.g38c60a5.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/38c60a516ecb061270b0f0f05239b8fe2ce4bf0e


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.27.1.el9_6]
changelog:
  - i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-100516]
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-87775]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-87775]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-87775]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-87775]
  - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98772] {CVE-2024-58002}
  - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98772]


author: Daniel Kreling <dkreling@redhat.com> - 3.17.0-2
changelog:
  - Update to kata-containers 3.17.0
    Resolves KATA-3903
  - CR-2 includes previously built 3.17.0-1 (version bump)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.28.1.el9_6]
changelog:
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CKI Backport Bot) [RHEL-101327] {CVE-2025-38089}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.29.1.el9_6]
changelog:
  - tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-99145]
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CKI Backport Bot) [RHEL-93555] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (CKI Backport Bot) [RHEL-93555] {CVE-2025-22121}
  - ext4: avoid journaling sb update on error if journal is destroying (Brian Foster) [RHEL-93591] {CVE-2025-22113}
  - ext4: define ext4_journal_destroy wrapper (Brian Foster) [RHEL-93591]
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CKI Backport Bot) [RHEL-102093] {CVE-2025-38110}
  - smb: client: fix regression with native SMB symlinks (Paulo Alcantara) [RHEL-101953]
  - redhat/configs: remove automotive directory (Eric Chanudet) [RHEL-96365]
  - r8169: enable RTL8168H/RTL8168EP/RTL8168FP ASPM support (CKI Backport Bot) [RHEL-96715]
  - r8169: disable RTL8126 ZRX-DC timeout (CKI Backport Bot) [RHEL-96715]
  - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101212] {CVE-2025-38086}
  - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98795] {CVE-2024-57980}
  - RDMA/mlx5: Fix page_size variable overflow (CKI Backport Bot) [RHEL-99320] {CVE-2025-22091}
  - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99384] {CVE-2025-21905}
  - RDMA/core: Fix use-after-free when rename device name (CKI Backport Bot) [RHEL-99048] {CVE-2025-22085}
  - octeon_ep: Fix host hang issue during device reboot (CKI Backport Bot) [RHEL-93251]
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Rafael Aquini) [RHEL-96368] {CVE-2025-37958}
  - octeon_ep_vf: Resolve netdevice usage count issue (CKI Backport Bot) [RHEL-93252]
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-87555]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.30.1.el9_6]
changelog:
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Davide Caratti) [RHEL-95853] {CVE-2025-37797}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.31.1.el9_6]
changelog:
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() (David Marlin) [RHEL-95324] {CVE-2025-37918}
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Desnes Nunes) [RHEL-99029] {CVE-2025-22020}
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (John W. Linville) [RHEL-97499] {CVE-2022-49788}
  - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103087]
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103087] {CVE-2025-38052}
  - md/raid1: Add check for missing source disk in process_checks() (CKI Backport Bot) [RHEL-97439]
  - net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101317] {CVE-2025-38087}
  - padata: avoid UAF for reorder_work (Rafael Aquini) [RHEL-97031] {CVE-2025-21727 CVE-2025-21726}
  - padata: fix UAF in padata_reorder (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
  - padata: add pd get/put refcnt helper (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
  - padata: fix sysfs store callback check (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
  - padata: Clean up in padata_do_multithreaded() (Rafael Aquini) [RHEL-97031] {CVE-2025-21727}
  - platform/x86: dell_rbu: Fix list usage (David Arcari) [RHEL-100908]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87900] {CVE-2025-21962}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.32.1.el9_6]
changelog:
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Davide Caratti) [RHEL-97522] {CVE-2025-38001 CVE-2025-37890}
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97522] {CVE-2025-38000}
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Davide Caratti) [RHEL-97522] {CVE-2025-37890}
  - sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97522]
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98847] {CVE-2025-21928}
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98871] {CVE-2025-21929}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.7-202508041447.p0.g4ab86ad.assembly.4.19.7
changelog:
  - Update to source commit https://github.com/openshift/microshift/commit/4ab86adeffe80f9a4f3f27b5296e80b2e40c2c5c


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.23.1
  - fixes "When using crun, the container’s terminal output is sometimes partially missing"
  - Resolves: OCPBUGS-59854


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.33.1.el9_6]
changelog:
  - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
  - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
  - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
  - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
  - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93387] {CVE-2025-38350}
  - redhat: update BUILD_TARGET to rhel-9.6.0-z-test-pesign (Jan Stancek)
  - PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102666]
  - PCI/ACS: Fix 'pci=config_acs=' parameter (Charles Mirabile) [RHEL-102652]
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Charles Mirabile) [RHEL-102652]
  - Documentation: Fix pci=config_acs= example (Charles Mirabile) [RHEL-102652]
  - Revert "PCI: Wait for device readiness with Configuration RRS" (John W. Linville) [RHEL-94414]
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82564]
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82564]
  - wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103219] {CVE-2025-38292}
  - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102235] {CVE-2025-38079}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.34.1.el9_6]
changelog:
  - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106625] {CVE-2025-38380}
  - tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106081] {CVE-2025-38471}
  - net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103028] {CVE-2025-38124}
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101246] {CVE-2025-38085}
  - mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101282] {CVE-2025-38084}
  - mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101282]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103256] {CVE-2025-38250}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.35.1.el9_6]
changelog:
  - s390/dasd: Remove DMA alignment (CKI Backport Bot) [RHEL-91593]
  - s390/cpumf: Update CPU Measurement facility extended counter set support (CKI Backport Bot) [RHEL-103066]
  - s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92100]
  - s390/pai: export number of sysfs attribute files (CKI Backport Bot) [RHEL-87178]
  - s390/pai: fix attr_event_free upper limit for pai device drivers (CKI Backport Bot) [RHEL-87178]
  - powerpc/64s/radix/kfence: map __kfence_pool at page granularity (Mamatha Inamdar) [RHEL-92081]
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103151] {CVE-2025-38159}
  - redhat: Mark kernel incompatible with xdp-tools<1.5.4 (Felix Maurer) [RHEL-101008]
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CKI Backport Bot) [RHEL-101008] {CVE-2025-21867}
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-100603]
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-100603] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-100603] {CVE-2025-37948}
  - arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-100603]
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-100603]
  - arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-100603]
  - redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-100603]
  - selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-100603 RHEL-92182] {CVE-2024-28956}
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Waiman Long) [RHEL-100603]
  - x86/bpf: Add IBHF call at end of classic BPF (Waiman Long) [RHEL-100603]
  - x86/bpf: Call branch history clearing sequence on exit (Waiman Long) [RHEL-100603]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-100603]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-100603]
  - x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-100603]
  - x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-100603]
  - x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-100603]
  - x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-100603]
  - x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-100603]
  - selftests: Warn about skipped tests in result summary (Waiman Long) [RHEL-100603]
  - x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-100603]
  - x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-100603]
  - x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-100603]
  - x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-100603]
  - x86/cpufeatures: Rename X86_FEATURE_FAST_CPPC to have AMD prefix (Waiman Long) [RHEL-100603]
  - tools/include: Sync x86 headers with the kernel sources (Waiman Long) [RHEL-100603]
  - selftests: ksft: Fix finished() helper exit code on skipped tests (Waiman Long) [RHEL-100603]
  - kselftest: Move ksft helper module to common directory (Waiman Long) [RHEL-100603]
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-100603]
  - x86/platform/atom: Switch to new Intel CPU model defines (Waiman Long) [RHEL-100603]
  - cpufreq: Switch to new Intel CPU model defines (Waiman Long) [RHEL-100603]
  - x86/bugs: Add 'spectre_bhi=vmexit' cmdline option (Waiman Long) [RHEL-100603]
  - EDAC/skx: Switch to new Intel CPU model defines (Waiman Long) [RHEL-100603]
  - EDAC/i10nm: Switch to new Intel CPU model defines (Waiman Long) [RHEL-100603]
  - x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL (Waiman Long) [RHEL-100603]
  - x86/aperfmperf: Switch to new Intel CPU model defines (Waiman Long) [RHEL-100603]
  - x86/apic: Switch to new Intel CPU model defines (Waiman Long) [RHEL-100603]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-100603]
  - EDAC/i10nm: Add Intel Grand Ridge micro-server support (Waiman Long) [RHEL-100603]
  - Revert "sch_htb: make htb_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138]
  - Revert "sch_drr: make drr_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138]
  - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Patrick Talbert) [RHEL-108138]
  - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Patrick Talbert) [RHEL-108138]
  - Revert "sch_htb: make htb_deactivate() idempotent" (Patrick Talbert) [RHEL-108138]
  - Revert "net/sched: Always pass notifications when child class becomes empty" (Patrick Talbert) [RHEL-108138]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202508052241.p0.g138db52.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/138db5223eea57e4408598a32320896c216724e1


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.36.1.el9_6]
changelog:
  - udp: Fix memory accounting leak. (Xin Long) [RHEL-104091] {CVE-2025-22058}
  - net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104719] {CVE-2025-37914}
  - sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104719]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.37.1.el9_6]
changelog:
  - ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108152] {CVE-2025-38417}
  - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-105151]
  - ethtool: Fix set RXNFC command with symmetric RSS hash (Mohammad Heib) [RHEL-103526]
  - drm/i915: Give i915 and xe each their own display tracepoints (Jocelyn Falempe) [RHEL-94419]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.38.1.el9_6]
changelog:
  - net/sched: ets: use old 'nbands' while purging unused classes (CKI Backport Bot) [RHEL-107537] {CVE-2025-38350}
  - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107537] {CVE-2025-38107}
  - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-37953}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93387] {CVE-2025-37798}
  - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
  - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
  - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-37932}
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107630] {CVE-2025-37823}
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CKI Backport Bot) [RHEL-106046] {CVE-2025-38200}
  - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106003] {CVE-2025-38461}
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104273] {CVE-2025-38211}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.39.1.el9_6]
changelog:
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109529] {CVE-2025-38500}
  - Merge: net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response [rhel-9.6.z] (Maxim Levitsky) [RHEL-58904]
  - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-102036]
  - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-102036]
  - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-102036]
  - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-102036]
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Thomas Huth) [RHEL-102036] {CVE-2025-37946}
  - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-102036] {CVE-2025-37974}
  - s390/pci: Fix potential double remove of hotplug slot (Thomas Huth) [RHEL-102036] {CVE-2024-56699}
  - s390/pci: remove hotplug slot when releasing the device (Thomas Huth) [RHEL-102036]
  - s390/pci: introduce lock to synchronize state of zpci_dev's (Thomas Huth) [RHEL-102036]
  - s390/pci: rename lock member in struct zpci_dev (Thomas Huth) [RHEL-102036]
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107895]
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105137]
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-94815]
  - s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-85387]
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-85387]
  - s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-85387]
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106651] {CVE-2025-38464}
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106415] {CVE-2025-22077}
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106415]
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106415]
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103555]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202508252101.p2.g97b7f2e.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/97b7f2e2ecbbf844812a7158086030bfff2bd324


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.41.1.el9_6]
changelog:
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-107002]
  - net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-109494]
  - ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-109494]
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109723]
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109723]
  - smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109723]
  - crypto: tegra - Fix IV usage for AES ECB (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Fix format specifier in tegra_sha_prep_cmd() (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Use HMAC fallback when keyslots are full (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Reserve keyslots to allocate dynamically (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Set IV to NULL explicitly for AES ECB (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Fix CMAC intermediate result handling (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Fix HASH intermediate result handling (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Transfer HASH init function to crypto engine (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - check return value for hash do_one_req (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - finalize crypto req on error (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Do not use fixed size buffers (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - Use separate buffer for setkey (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - remove redundant error check on ret (Nirmala Dalvi) [RHEL-107286]
  - crypto: tegra - do not transfer req when tegra init fails (Nirmala Dalvi) [RHEL-107286]
  - crypto: engine - Remove prepare/unprepare request (Nirmala Dalvi) [RHEL-107286]
  - udmabuf: fix a buf size overflow issue during udmabuf creation (CKI Backport Bot) [RHEL-99746] {CVE-2025-37803}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.42.1.el9_6]
changelog:
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103015]
  - drm/framebuffer: Acquire internal references on GEM handles (José Expósito) [RHEL-106699] {CVE-2025-38449}
  - drm/gem: Acquire references on GEM handles for framebuffers (José Expósito) [RHEL-106699] {CVE-2025-38449}
  - drm/vkms: Fix use after free and double free on init error (CKI KWF BOT) [RHEL-99420] {CVE-2025-22097}
  - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105933] {CVE-2025-38332}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202509011627.p2.g169f654.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/169f654a6b0bc3dcca620eda17240b86c578cb10


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202509070341.p2.gb5229e8.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/b5229e8311fe15cd8e9a70de2279868726b19f84


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7.rhaos4.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/b0d88c7)
  - fixes "CVE-2025-9566 podman: Podman kube play command may overwrite host files [openshift-4.19]"
  - Resolves: OCPBUGS-61268


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.43.1.el9_6]
changelog:
  - eth: bnxt: fix missing ring index trim on error path (CKI Backport Bot) [RHEL-104561] {CVE-2025-37873}
  - book3s64/radix : Align section vmemmap start address to PAGE_SIZE (Mamatha Inamdar) [RHEL-109492]
  - book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n (Mamatha Inamdar) [RHEL-109492]
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-89050]
  - enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108274]
  - net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108274]
  - enic: get max rq & wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106604]
  - enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106604]
  - enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106604]
  - enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106604]
  - enic: enable rq extended cq support (John Meneghini) [RHEL-106604]
  - enic: enic rq extended cq defines (John Meneghini) [RHEL-106604]
  - enic: enic rq code reorg (John Meneghini) [RHEL-106604]
  - enic: Move function from header file to c file (John Meneghini) [RHEL-106604]
  - enic: add dependency on Page Pool (John Meneghini) [RHEL-106604]
  - enic: remove copybreak tunable (John Meneghini) [RHEL-106604]
  - enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106604]
  - enic: Simplify RX handler function (John Meneghini) [RHEL-106604]
  - enic: Move RX functions to their own file (John Meneghini) [RHEL-106604]
  - enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106604]
  - enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106604]
  - enic: Move RX coalescing set function (John Meneghini) [RHEL-106604]
  - enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106604]
  - enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106604]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106604]
  - enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106604]
  - enic: Save resource counts we read from HW (John Meneghini) [RHEL-106604]
  - enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106604]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106604]
  - enic: Report some per queue statistics in ethtool (John Meneghini) [RHEL-106604]
  - enic: Report per queue statistics in netdev qstats (John Meneghini) [RHEL-106604]
  - enic: Collect per queue statistics (John Meneghini) [RHEL-106604]
  - enic: Use macro instead of static const variables for array sizes (John Meneghini) [RHEL-106604]
  - enic: add ethtool get_channel support (John Meneghini) [RHEL-106604]
  - enic: Validate length of nl attributes in enic_set_vf_port (John Meneghini) [RHEL-106604]
  - enic: Replace hardcoded values for vnic descriptor by defines (John Meneghini) [RHEL-106604]
  - enic: Avoid false positive under FORTIFY_SOURCE (John Meneghini) [RHEL-106604]
  - scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-106420]
  - scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-106420]
  - scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-106420]
  - scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-106420]
  - scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-106420]
  - scsi: fnic: Remove unnecessary NUL-terminations (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove redundant flush_workqueue() calls (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-106419]
  - scsi: fnic: Replace fnic->lock_flags with local flags (John Meneghini) [RHEL-106419]
  - scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-106419]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-106419]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-106419]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-106419]
  - scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-106419]
  - scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-106419]
  - scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-106419]
  - scsi: fnic: Increment driver version (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-106419]
  - scsi: fnic: Code cleanup (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-106419]
  - scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-106419]
  - scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-106419]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Use vcalloc() instead of vmalloc() and memset(0) (John Meneghini) [RHEL-106419]
  - scsi: fnic: Move flush_work initialization out of if block (John Meneghini) [RHEL-106419]
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (John Meneghini) [RHEL-106419]
  - scsi: fnic: Convert snprintf() to sysfs_emit() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-106419]
  - scsi: fnic: unlock on error path in fnic_queuecommand() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Increment driver version (John Meneghini) [RHEL-106419]
  - scsi: fnic: Improve logs and add support for multiqueue (MQ) (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic driver (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove usage of host_lock (John Meneghini) [RHEL-106419]
  - scsi: fnic: Define stats to track multiqueue (MQ) IOs (John Meneghini) [RHEL-106419]
  - scsi: fnic: Modify ISRs to support multiqueue (MQ) (John Meneghini) [RHEL-106419]
  - scsi: fnic: Refactor and redefine fnic.h for multiqueue (John Meneghini) [RHEL-106419]
  - scsi: fnic: Get copy workqueue count and interrupt mode from config (John Meneghini) [RHEL-106419]
  - scsi: fnic: Rename wq_copy to hw_copy_wq (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add and improve log messages (John Meneghini) [RHEL-106419]
  - scsi: fnic: Add and use fnic number (John Meneghini) [RHEL-106419]
  - scsi: fnic: Modify definitions to sync with VIC firmware (John Meneghini) [RHEL-106419]
  - scsi: fnic: Return error if vmalloc() failed (John Meneghini) [RHEL-106419]
  - scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-106419]
  - scsi: fnic: Fix sg_reset success path (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Replace sgreset tag with max_tag_id (John Meneghini) [RHEL-106419]
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Use vmalloc_array() and vcalloc() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Use vzalloc() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (John Meneghini) [RHEL-106419]
  - scsi: fnic: Replace DMA mask of 64 bits with 47 bits (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove unneeded flush_workqueue() (John Meneghini) [RHEL-106419]
  - scsi: fnic: Remove redundant NULL check (John Meneghini) [RHEL-106419]
  - scsi: fnic: Stop using the SCSI pointer (John Meneghini) [RHEL-106419]
  - scsi: fnic: Fix a tracing statement (John Meneghini) [RHEL-106419]
  - scsi: fnic: Call scsi_done() directly (John Meneghini) [RHEL-106419]
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Mark Langsdorf) [RHEL-85410]


author: Chao YE <cye@redhat.com> [5.14.0-570.44.1.el9_6]
changelog:
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CKI Backport Bot) [RHEL-111149] {CVE-2025-38550}
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112780] {CVE-2025-38352}
  - powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (CKI Backport Bot) [RHEL-113173]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.45.1.el9_6]
changelog:
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Adrian Moreno) [RHEL-113279]
  - igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-108118]
  - igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-108118]
  - igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-108118]
  - igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-108118]
  - igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-108118]
  - igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-108118]
  - igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-108118]
  - ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111766]
  - ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111766]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202509122308.p2.g335be3a.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/335be3a93cc6f48d84e5e6cd515ef748efb9664b


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.46.1.el9_6]
changelog:
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125}
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113558] {CVE-2025-39694}
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107301] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107301] {CVE-2025-38498}
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107649] {CVE-2025-37810}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.47.1.el9_6]
changelog:
  - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113916]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113333] {CVE-2025-38718}
  - ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-113039]
  - ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-112558]
  - ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Petr Oros) [RHEL-112873]
  - ice: fix NULL access of tx->in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-112873]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-112558]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-112558]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-112558]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-112558]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-112558]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-112558]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-112558]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-112558]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-112558]
  - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-112683]
  - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-112683]
  - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-112683]
  - ice: Fix E825 initialization (Petr Oros) [RHEL-112683]
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82136]
  - smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111196] {CVE-2025-38527}
  - i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109571]
  - cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-109525]
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106432] {CVE-2025-38472}
  - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-91800]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.48.1.el9_6]
changelog:
  - perf trace: Add missing perf_tool__init() (Michael Petlan) [RHEL-105393]
  - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-114962]
  - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-114962]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.49.1.el9_6]
changelog:
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114335] {CVE-2025-39698}
  - selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682}
  - tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114326] {CVE-2025-39682}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.50.1.el9_6]
changelog:
  - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68092] {CVE-2024-50301}
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (Jon Maloy) [RHEL-104730] {CVE-2025-38351}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.51.1.el9_6]
changelog:
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114705] {CVE-2025-39761}
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100798]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202509240557.p2.g9fa6215.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/9fa6215ec67894ee1303a01eaf2fe833877d6e5a


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.52.1.el9_6]
changelog:
  - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117232] {CVE-2023-53373}
  - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116186]
  - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-115069]
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-115069]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-115069]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-115069]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-115069]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-115069]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-115069]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-115069]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-115069]
  - net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-115069]
  - net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-115069]
  - net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-115069]
  - RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-115069]
  - net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-115069]
  - RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-115069]
  - net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-115069]
  - hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-115069]
  - net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-115069]
  - RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-115069]
  - RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-115069]
  - net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-115069]
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-115069]
  - hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-115069]
  - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (Maxim Levitsky) [RHEL-115069]
  - RDMA/mana_ib: use the correct page table index based on hardware page size (Maxim Levitsky) [RHEL-115069]
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Maxim Levitsky) [RHEL-115069]
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Maxim Levitsky) [RHEL-115069]
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114688] {CVE-2025-38729}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114688]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114688] {CVE-2025-39757}
  - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111036] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111036] {CVE-2025-38556}
  - HID: simplify snto32() (CKI Backport Bot) [RHEL-111036] {CVE-2025-38556}
  - eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111052] {CVE-2025-38614}
  - smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107109]
  - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107109]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.53.1.el9_6]
changelog:
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117578] {CVE-2025-39849}
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114436]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114436]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114436]
  - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93610] {CVE-2025-22026}
  - irdma: free iwdev->rf after removing MSI-X (CKI Backport Bot) [RHEL-111485]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.54.1.el9_6]
changelog:
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-113836] {CVE-2022-50087}
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110811]
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110811] {CVE-2025-38571}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118256] {CVE-2025-39817}
  - sunrpc: fix handling of server side tls alerts (Steve Dickson) [RHEL-111070] {CVE-2025-38566}
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (Jay Shin) [RHEL-116679]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202510101528.p2.gf94ad89.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/f94ad893331edbc7eaab8d919339984a497695aa


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.55.1.el9_6]
changelog:
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119115] {CVE-2025-39841}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.56.1.el9_6]
changelog:
  - NFS: Return the file btime in the statx results when appropriate (Benjamin Coddington) [RHEL-111706]
  - nfs: Add timecreate to nfs inode (Benjamin Coddington) [RHEL-111706]
  - Expand the type of nfs_fattr->valid (Benjamin Coddington) [RHEL-111706]
  - smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-117879]
  - smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-117879]
  - smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-117879]
  - smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-117879]
  - smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-117879]
  - smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-117879]
  - fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-117879] {CVE-2025-39819}
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114848] {CVE-2025-39751}
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Benjamin Coddington) [RHEL-116232]
  - xfs: make sure sb_fdblocks is non-negative (CKI Backport Bot) [RHEL-114540]
  - block: fix adding folio to bio (Ming Lei) [RHEL-96789]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.57.1.el9_6]
changelog:
  - NFSv4/flexfiles: Fix layout merge mirror check. (Benjamin Coddington) [RHEL-118731]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113610] {CVE-2025-39730}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.58.1.el9_6]
changelog:
  - pstore/ram: Check start of empty przs during init (CKI Backport Bot) [RHEL-122067] {CVE-2023-53331}
  - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114299] {CVE-2025-39718}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.59.1.el9_6]
changelog:
  - nvme-tcp: fix premature queue removal and I/O failover (Maurizio Lombardi) [RHEL-105111]
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-120964]
  - KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-120964]
  - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-118857]
  - SUNRPC: Cleanup/fix initial rq_pages allocation (Benjamin Coddington) [RHEL-108160]
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (CKI Backport Bot) [RHEL-116666] {CVE-2022-50367}
  - ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116384] {CVE-2025-39702}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.60.1.el9_6]
changelog:
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-117437]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-117437]
  - crypto: xts - Handle EBUSY correctly (CKI Backport Bot) [RHEL-119235] {CVE-2023-53494}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202510280653.p2.g168e32e.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/oc/commit/168e32ecf12af2d2ea4cb1e117355916da8cb4a6


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.61.1.el9_6]
changelog:
  - NFS: Extend rdirplus mount option with "force|none" (CKI Backport Bot) [RHEL-118450]
  - sched: Fix stop_one_cpu_nowait() vs hotplug (Luis Claudio R. Goncalves) [RHEL-116212]
  - s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114433]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114433]
  - debugfs: lockdown: Allow reading debugfs files that are not world readable (Mete Durlu) [RHEL-114433]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.62.1.el9_6]
changelog:
  - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114270]
  - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114270] {CVE-2025-40300}
  - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114270] {CVE-2025-40300}
  - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114270] {CVE-2025-40300}
  - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114270] {CVE-2025-40300}
  - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114270] {CVE-2025-40300}
  - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114270] {CVE-2025-40300}
  - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114270] {CVE-2025-40300}
  - randomize_kstack: Remove non-functional per-arch entropy filtering (Waiman Long) [RHEL-114270]
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83896 RHEL-83905] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83896 RHEL-83905] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83896 RHEL-83905] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83896 RHEL-83905] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83896 RHEL-83905] {CVE-2024-36357 CVE-2024-36350}
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/idle: Standardize argument types for MONITOR{,X} and MWAIT{,X} instruction wrappers on 'u32' (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and  prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83896 RHEL-83905] {CVE-2025-22047}
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array (Waiman Long) [RHEL-83896 RHEL-83905] {CVE-2024-56721}
  - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Use code segment selector for VERW operand (Waiman Long) [RHEL-83896 RHEL-83905] {CVE-2024-50072}
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/CPU/AMD: Improve the erratum 1386 workaround (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86: Add a comment about the "magic" behind shadow sti before mwait (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Revert "Reverse instruction order of CLEAR_CPU_BUFFERS" (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-83896 RHEL-83905]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Skip RSB fill at VMEXIT (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Fix handling when SRSO mitigation is disabled (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add missing NO_SSB flag (Waiman Long) [RHEL-83896 RHEL-83905]
  - Documentation/srso: Document a method for checking safe RET operates properly (Waiman Long) [RHEL-83896 RHEL-83905]
  - redhat/configs: Add new CONFIG_MITIGATION_* kconfig files (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for GDS (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Remove GDS Force Kconfig option (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for SSB (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for Spectre V2 (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for SRBDS (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for Spectre v1 (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for RETBLEED (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for L1TF (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for MMIO Stable Data (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for TAA (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Add a separate config for MDS (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/cpufeatures: Flip the /proc/cpuinfo appearance logic (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-83896 RHEL-83905]
  - x86/cpu: Use EXPORT_PER_CPU_SYMBOL_GPL() for x86_spec_ctrl_current (Waiman Long) [RHEL-83896 RHEL-83905]
  - docs: move x86 documentation into Documentation/arch/ (Waiman Long) [RHEL-83896 RHEL-83905]
  - cxgb4: Avoid removal of uninserted tid JIRA: https://issues.redhat.com/browse/RHEL-112152 (Jakub Ramaseuski)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.63.1.el9_6]
changelog:
  - redhat: add downstream SBAT for UKI addons (Li Tian) [RHEL-125868]
  - uki_addons: provide custom SBAT as input parameter (Li Tian) [RHEL-125868]
  - uki_addons: remove completely sbat/sbat.conf (Li Tian) [RHEL-125868]
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} [rhel-9.6.z] (Xin Long) [RHEL-125512]
  - redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-125318]
  - net: openvswitch: allow providing upcall pid for the 'execute' command (Paolo Valerio) [RHEL-117828]
  - net: netlink: add nla_get_*_default() accessors (Paolo Valerio) [RHEL-117828]
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107467]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107467]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107467]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-107467]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107467]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107467]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107467]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107467]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-107467]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107467]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107467]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107467]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107467]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107467]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107467]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107467]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107467]
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-113412]
  - ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-113412]
  - ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-113412]
  - ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-113412]
  - ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-113412]
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-113412]
  - ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-113412]
  - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-113412]
  - ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-113412]
  - ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-113412]
  - ice: stop truncating queue ids when checking (Petr Oros) [RHEL-113412]
  - virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-113412]
  - ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-113412]
  - ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-113412]
  - ice: E825C PHY register cleanup (Petr Oros) [RHEL-113412]
  - ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-113412]
  - ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-113412]
  - ice: Add E830 checksum offload support (Petr Oros) [RHEL-113412]
  - ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-113412]
  - ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-113412]
  - ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-113412]
  - ice: do not configure destination override for switchdev (Petr Oros) [RHEL-113412]
  - ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-113412]
  - virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-113412]
  - ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-113412]
  - virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-113412]
  - ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-113412]
  - ice: use generic unrolled_count() macro (Petr Oros) [RHEL-113412]
  - ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-113412]
  - ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-113412]
  - ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-113412]
  - ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-113412]
  - ice: support FW Recovery Mode (Petr Oros) [RHEL-113412]
  - devlink: add devl guard (Petr Oros) [RHEL-113412]
  - pldmfw: enable selected component update (Petr Oros) [RHEL-113412]
  - ice: use string choice helpers (Petr Oros) [RHEL-113412]
  - ice: add fw and port health reporters (Petr Oros) [RHEL-113412]
  - ice: add recipe priority check in search (Petr Oros) [RHEL-113412]
  - ice: Add MDD logging via devlink health (Petr Oros) [RHEL-113412]
  - ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-113412]
  - ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-113412]
  - ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-113412]
  - ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-113412]
  - ice: reduce size of queue context fields (Petr Oros) [RHEL-113412]
  - ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-113412]
  - ice: use structures to keep track of queue context size (Petr Oros) [RHEL-113412]
  - ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-113412]
  - ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-113412]
  - ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-113412]
  - ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-113412]
  - ice: Unbind the workqueue (Petr Oros) [RHEL-113412]
  - ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-113412]
  - ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-113412]
  - ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-113412]
  - ice: support optional flags in signature segment header (Petr Oros) [RHEL-113412]
  - ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-113412]
  - ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-113412]
  - ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-113412]
  - ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-113412]
  - virtchnl: fix m68k build. (Petr Oros) [RHEL-113412]
  - virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-113412]
  - ice: Cleanup unused declarations (Petr Oros) [RHEL-113412]
  - ice: Use common error handling code in two functions (Petr Oros) [RHEL-113412]
  - ice: Make use of assign_bit() API (Petr Oros) [RHEL-113412]
  - ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-113412]
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-113412]
  - ice: Implement ethtool reset support (Petr Oros) [RHEL-113412]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-113412]
  - devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-113412]
  - devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-113412]
  - devlink: Improve the port attributes description (Petr Oros) [RHEL-113412]
  - redhat: Add packing_test to mod-internal.list (Petr Oros) [RHEL-113412]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-113412]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (Petr Oros) [RHEL-113412]
  - lib: packing: document recently added APIs (Petr Oros) [RHEL-113412]
  - lib: packing: add pack_fields() and unpack_fields() (Petr Oros) [RHEL-113412]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (Petr Oros) [RHEL-113412]
  - lib: packing: create __pack() and __unpack() variants without error checking (Petr Oros) [RHEL-113412]
  - lib: packing: use GENMASK() for box_mask (Petr Oros) [RHEL-113412]
  - lib: packing: use BITS_PER_BYTE instead of 8 (Petr Oros) [RHEL-113412]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (Petr Oros) [RHEL-113412]
  - lib: packing: add additional KUnit tests (Petr Oros) [RHEL-113412]
  - lib: packing: add KUnit tests adapted from selftests (Petr Oros) [RHEL-113412]
  - lib: packing: duplicate pack() and unpack() implementations (Petr Oros) [RHEL-113412]
  - lib: packing: add pack() and unpack() wrappers over packing() (Petr Oros) [RHEL-113412]
  - lib: packing: remove kernel-doc from header file (Petr Oros) [RHEL-113412]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (Petr Oros) [RHEL-113412]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (Petr Oros) [RHEL-113412]
  - lib: packing: remove MODULE_LICENSE in non-modules (Petr Oros) [RHEL-113412]
  - Documentation: core-api: packing: correct spelling (Petr Oros) [RHEL-113412]
  - lib: packing: replace bit_reverse() with bitrev8() (Petr Oros) [RHEL-113412]
  - kabi: update checksums after add devlink padding (Petr Oros) [RHEL-106155]
  - devlink: Add new "clock_id" generic device param (Ivan Vecera) [RHEL-106155]
  - devlink: Add support for u64 parameters (Ivan Vecera) [RHEL-106155]
  - netlink: specs: devlink: replace underscores with dashes in names (Ivan Vecera) [RHEL-106155]
  - devlink: Add new "enable_phc" generic device param (Ivan Vecera) [RHEL-106155]
  - netlink: fix policy dump for int with validation callback (Ivan Vecera) [RHEL-106155]
  - devlink: use DEVLINK_VAR_ATTR_TYPE_* instead of NLA_* in fmsg (Ivan Vecera) [RHEL-106155]
  - devlink: avoid param type value translations (Ivan Vecera) [RHEL-106155]
  - devlink: define enum for attr types of dynamic attributes (Ivan Vecera) [RHEL-106155]
  - devlink: use devlink_nl_put_u64() helper (Petr Oros) [RHEL-106155]
  - devlink: introduce devlink_nl_put_u64() (Petr Oros) [RHEL-106155]
  - devlink: add reserved fields to devlink_*_ops (Petr Oros) [RHEL-106155]
  - dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-106157]
  - dpll: add phase_offset_monitor_get/set callback ops (Ivan Vecera) [RHEL-106157]
  - dpll: add phase-offset-monitor feature to netlink spec (Ivan Vecera) [RHEL-106157]
  - dpll: add clock quality level attribute and op (Ivan Vecera) [RHEL-106157]
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-106157]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.64.1.el9_6]
changelog:
  - dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-116160]
  - dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116160]
  - dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116160]
  - dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116160]
  - dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-116160]
  - dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116160]
  - dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116160]
  - dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116160]
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CKI Backport Bot) [RHEL-124580] {CVE-2024-56690}
  - ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116539]
  - dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-113082]
  - dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-113082]
  - redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-113082]
  - redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-113082]
  - dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-113082]
  - dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-113082]
  - spi: Introduce spi_get_device_match_data() helper (Ivan Vecera) [RHEL-113082]
  - dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-113082]
  - dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-113082]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202511120453.p2.gb67dfb0.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/b67dfb0bd2ce5bc18e84bab0d0fd54b0de21644f


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202511032026.p2.gb61226d.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/oc/commit/b61226dacc6e9eeadcc6103cbfc3c6b47fea5e99


author: Steven Presti <spresti@redhat.com> - 2.21.0-6
changelog:
  - Build Ignition with GOEXPERIMENT=strictfipsruntime
    Ignition-validate non-FIPS
  - Backport https://github.com/coreos/ignition/pull/2159


author: Daniel Kreling <dkreling@redhat.com> - 3.21.0-3
changelog:
  - Use Kata 3.21.0
    Resolves: KATA-4199
    Resolves: KATA-4200
  - Ship CRI-O and kata configuration for peer pods
    Resolves: KATA-3969


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.65.1.el9_6]
changelog:
  - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková)
  - gitlab-ci: disable automotive pipelines (Scott Weaver)
  - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (Benjamin Coddington) [RHEL-122151]
  - sched: Add wait/wake interface for variable updated under a lock. (Benjamin Coddington) [RHEL-122151]
  - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (Benjamin Coddington) [RHEL-122151]
  - sched: Document wait_var_event() family of functions and wake_up_var() (Benjamin Coddington) [RHEL-122151]
  - sched: Improve documentation for wake_up_bit/wait_on_bit family of functions (Benjamin Coddington) [RHEL-122151]
  - sched: change wake_up_bit() and related function to expect unsigned long * (Benjamin Coddington) [RHEL-122151]
  - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123803]
  - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123803] {CVE-2025-39968}
  - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123803] {CVE-2025-39969}
  - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123803] {CVE-2025-39970}
  - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123803] {CVE-2025-39971}
  - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123803] {CVE-2025-39972}
  - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123803] {CVE-2025-39973}
  - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-123758]
  - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-123758]
  - dma/mapping.c: dev_dbg support for dma_addressing_limited (Prarit Bhargava) [RHEL-121250]
  - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Prarit Bhargava) [RHEL-121250]
  - x86/kaslr: Reduce KASLR entropy on most x86 systems (Prarit Bhargava) [RHEL-121250]


author: Roberto Bergantinos Corpas <rbergant@redhat.com> [5.14.0-570.66.1.el9_6]
changelog:
  - io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI KWF BOT) [RHEL-124972] {CVE-2025-40047}
  - KVM: selftests: Add back the missing check of MONITOR/MWAIT availability (Paolo Bonzini) [RHEL-111833]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Paolo Bonzini) [RHEL-111833]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115478]
  - KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115478]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115478]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115478]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115478]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115478]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115478]
  - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Reject KVM_SET_TSC_KHZ vCPU ioctl for TSC protected guest (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Ensure unused kvm_tdx_capabilities fields are zeroed out (Paolo Bonzini) [RHEL-111833]
  - Documentation: KVM: Fix unexpected unindent warning (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Don't report base TDVMCALLs (Paolo Bonzini) [RHEL-111833]
  - Documentation: KVM: Fix unexpected unindent warnings (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: avoid underflow when scaling TSC frequency (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Report supported optional TDVMCALLs in TDX capabilities (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Exit to userspace for SetupEventNotifyInterrupt (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Exit to userspace for GetTdVmCallInfo (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetQuote> (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add new TDVMCALL status code for unsupported subfuncs (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (Maxim Levitsky) [RHEL-111833]
  - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (Maxim Levitsky) [RHEL-111833]
  - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (Maxim Levitsky) [RHEL-111833]
  - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (Maxim Levitsky) [RHEL-111833]
  - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (Maxim Levitsky) [RHEL-111833]
  - KVM: TDX: Use kvm_arch_vcpu.host_debugctl to restore the host's DEBUGCTL (Maxim Levitsky) [RHEL-111833]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Maxim Levitsky) [RHEL-111833]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-111833]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-111833] {CVE-2025-37957}
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-111833]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-111833]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-111833]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-111833]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-111833]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-111833]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-111833]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-111833]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-111833]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-111833]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-111833]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-111833]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-111833]
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-111833]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-111833]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-111833]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-111833]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-111833]
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Paolo Bonzini) [RHEL-111833]
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-111833]
  - x86/tdx: mark tdh_vp_enter() as __flatten (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: use __always_inline for is_td_vcpu and is_td (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Revert kvm_x86_ops.mem_enc_ioctl() back to an OPTIONAL hook (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Use kvm_x86_call() instead of manual static_call() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Paolo Bonzini) [RHEL-111833]
  - RHEL: add debugging info for TDX module initialization (Paolo Bonzini) [RHEL-111833]
  - Documentation/virt/kvm: Document on Trust Domain Extensions (TDX) (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Make TDX VM type supported (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: KVM: TDX: Always honor guest PAT on TDX enabled guests (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: remove shadow_memtype_mask (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Introduce supported_quirks to block disabling quirks (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Allow vendor code to disable quirks (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: do not allow re-enabling quirks (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Enable guest access to MTRR MSRs (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add a method to ignore hypercall patching (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Ignore setting up mce (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add methods to ignore accesses to TSC (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add methods to ignore VMX preemption timer (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add method to ignore guest instruction emulation (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (Maxim Levitsky) [RHEL-111833]
  - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (Maxim Levitsky) [RHEL-111833]
  - KVM: TDX: Add methods to ignore accesses to CPU state (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CKI Backport Bot) [RHEL-111833] {CVE-2025-21839}
  - KVM: TDX: Handle TDG.VP.VMCALL<GetTdVmCallInfo> hypercall (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Enable guest access to LMCE related MSRs (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Implement callbacks for MSR operations (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Move KVM_MAX_MCE_BANKS to header file (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TDX PV HLT hypercall (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TDX PV CPUID hypercall (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Kick off vCPUs when SEAMCALL is busy during TD page removal (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Retry locally in TDX EPT violation handler on RET_PF_RETRY (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Detect unexpected SEPT violations due to pending SPTEs (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle EPT violation/misconfig exit (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle EXIT_REASON_OTHER_SMI (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle EXCEPTION_NMI and EXTERNAL_INTERRUPT (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Add a helper for NMI handling (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Move emulation_required to struct vcpu_vt (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add methods to ignore virtual apic related operation (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Force APICv active for TDX guest (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Enforce KVM_IRQCHIP_SPLIT for TDX guests (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Always block INIT/SIPI (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle SMI request as !CONFIG_KVM_SMM (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Implement methods to inject NMI (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Wait lapic expire when timer IRQ was injected (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Assume timer IRQ was injected if APIC state is protected (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Implement non-NMI interrupt injection (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Move posted interrupt delivery code to common header (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Disable PI wakeup for IPIv (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add support for find pending IRQ in a protected local APIC (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TDX PV MMIO hypercall (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TDX PV port I/O hypercall (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TDG.VP.VMCALL<ReportFatalError> (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TDG.VP.VMCALL<MapGPA> (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle KVM hypercall with TDG.VP.VMCALL (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add a place holder to handle TDX VM exit (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Move pv_unhalted check out of kvm_vcpu_has_events() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Have ____kvm_emulate_hypercall() read the GPRs (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Add a switch_db_regs flag to handle TDX's auto-switched behavior (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Save and restore IA32_DEBUGCTL (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Disable support for TSX and WAITPKG (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: restore user ret MSRs (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: restore host xsave state when exit from the guest TD (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: vcpu_run: save/restore host state(host kernel gs) (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Implement TDX vcpu enter/exit path (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Move common fields of struct vcpu_{vmx,tdx} to a struct (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Use separate subclasses for PI wakeup lock to squash false positive (Maxim Levitsky) [RHEL-111833]
  - KVM: VMX: Assert that IRQs are disabled when putting vCPU on PI wakeup list (Maxim Levitsky) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrapper to enter/exit TDX guest (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle SEPT zap error due to page add error in premap (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Skip updating CPU dirty logging request for TDs (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Make cpu_dirty_log_size a per-VM value (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: read the PML log in the same order as it was written (Maxim Levitsky) [RHEL-111833]
  - KVM: VMX: refactor PML terminology (Maxim Levitsky) [RHEL-111833]
  - KVM: x86/mmu: Add parameter "kvm" to kvm_mmu_page_ad_need_write_protect() (Paolo Bonzini) [RHEL-111833]
  - KVM: Add parameter "kvm" to kvm_cpu_dirty_log_size() and its callers (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle vCPU dissociation (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Finalize VM initialization (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add an ioctl to create initial guest memory (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Export kvm_tdp_map_page() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Bail out kvm_tdp_map_page() when VM dead (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Implement hook to get max mapping level of private pages (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Implement hooks to propagate changes of TDP MMU mirror page table (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Handle TLB tracking for TDX (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Set per-VM shadow_mmio_value to 0 (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Add setter for shadow_mmio_value (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Require TDP MMU, mmio caching and EPT A/D bits for TDX (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Set gfn_direct_bits to shared bit (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add load_mmu_pgd method for TDX (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add accessors VMX VMCS helpers (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Teach EPT violation helper about private mem (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Split out guts of EPT violation to common/exposed function (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Do not enable page track for TD guest (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Implement memslot deletion for TDX (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers for TD measurement of initial contents (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers to remove a TD private page (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers to manage TDX TLB tracking (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers to add TD private pages (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrapper tdh_mem_sept_add() to add SEPT pages (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Register TDX host key IDs to cgroup misc controller (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Taking guest pa into consideration when calculate tdp level (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Introduce KVM_TDX_GET_CPUID (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Do TDX specific vcpu initialization (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: create/free TDX vcpu structure (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Don't offline the last cpu of one package when there's TDX guest (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Make pmu_intel.c ignore guest TD case (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: add ioctl to initialize VM with TDX specific parameters (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: expose cpuid_entry2_find for TDX (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Support per-VM KVM_CAP_MAX_VCPUS extension check (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: create/destroy VM structure (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Get system-wide info about TDX module on initialization (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add helper functions to print TDX SEAMCALL error (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add TDX "architectural" error codes (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Define TDX architectural definitions (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Add placeholders for TDX VM/vCPU structures (Paolo Bonzini) [RHEL-111833]
  - KVM: TDX: Get TDX global information (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Initialize TDX during KVM module load (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Refactor VMX module init/exit functions (Paolo Bonzini) [RHEL-111833]
  - KVM: Export hardware virtualization enabling/disabling functions (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add tdx_guest_keyid_alloc/free() to alloc and free TDX guest KeyID (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Read essential global metadata for KVM (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: allocate tdx_sys_info in static memory (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX flush operations (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX VM/vCPU field access (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX page cache management (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX vCPU creation (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX TD creation (Paolo Bonzini) [RHEL-111833]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX KeyID management (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Add infrastructure for secure TSC (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Support GFN direct bits (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Add a VM type define for TDX (Paolo Bonzini) [RHEL-111833]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Paolo Bonzini) [RHEL-111833]
  - x86/irq: Remove bitfields in posted interrupt descriptor (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Dedup fastpath MSR post-handling logic (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (Paolo Bonzini) [RHEL-111833]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Free vCPUs before freeing VM state (Paolo Bonzini) [RHEL-111833]
  - Documentation: KVM: update amd-memory-encryption.rst references (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Modify NMI and INTR handlers to take intr_info as function argument (Paolo Bonzini) [RHEL-111833]
  - KVM: VMX: Drop support for forcing UC memory when guest CR0.CD=1 (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Remove VMX support for virtualizing guest MTRR memtypes (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Add fastpath handling of HLT VM-Exits (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Reorganize code in x86.c to co-locate vCPU blocking/running helpers (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Always complete hypercall via function callback (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: don't fall through case statements without annotations (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Only advertise KVM_CAP_READONLY_MEM when supported by VM (Paolo Bonzini) [RHEL-111833]
  - KVM: x86: Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX) (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Paolo Bonzini) [RHEL-111833]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Paolo Bonzini) [RHEL-111833]
  - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123115] {CVE-2025-39898}
  - net/smc: Fix lookup of netdev by using ib_device_get_netdev() (CKI Backport Bot) [RHEL-114785]
  - smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124916]
  - xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115729]
  - nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123685]
  - NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-124650]
  - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-124650]
  - nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-122377]
  - nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-122377]
  - nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-122377]
  - Revert "Merge: x86: Reduce KASLR entropy" (Roberto Bergantinos Corpas)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.67.1.el9_6]
changelog:
  - uki: get rid of RHEL-only walinuxagentcvm module in the initramfs (Li Tian) [RHEL-129134]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Jerry Snitselaar) [RHEL-129056]
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Scott Mayhew) [RHEL-125601] {CVE-2025-38724}
  - kernfs: Fix UAF in polling when open file is released (Pavel Reichl) [RHEL-122086] {CVE-2025-39881}
  - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122875] {CVE-2025-39864}
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Lyude Paul) [RHEL-97046]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.68.1.el9_6]
changelog:
  - smb: client: remove redundant lstrp update in negotiate protocol (Jay Shin) [RHEL-129424]
  - smb: client: fix use-after-free in crypt_message when using async crypto (Jay Shin) [RHEL-129424]
  - smb: client: fix race condition in negotiate timeout by using more precise timing (Jay Shin) [RHEL-129424]
  - cifs: Correctly set SMB1 SessionKey field in Session Setup Request (Jay Shin) [RHEL-129424]
  - smb: client: fix first command failure during re-negotiation (Jay Shin) [RHEL-129424]
  - wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123065]
  - wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123065]
  - wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123065] {CVE-2025-39918}
  - wifi: mt76: only enable tx worker after setting the channel (Jose Ignacio Tornos Martinez) [RHEL-123065]
  - wifi: mt76: remove mt76_calculate_default_rate() (Jose Ignacio Tornos Martinez) [RHEL-123065]
  - wifi: mt76: do not add wcid entries to sta poll list during MCU reset (Jose Ignacio Tornos Martinez) [RHEL-123065]
  - dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Prarit Bhargava) [RHEL-121250]
  - dma/mapping.c: dev_dbg support for dma_addressing_limited (Prarit Bhargava) [RHEL-121250]
  - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Prarit Bhargava) [RHEL-121250]
  - x86/kaslr: Reduce KASLR entropy on most x86 systems (Prarit Bhargava) [RHEL-121250]
  - octeon_ep: Validate the VF ID (Kamal Heib) [RHEL-117606]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.69.1.el9_6]
changelog:
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Paolo Abeni) [RHEL-120667]
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Marc Milgram) [RHEL-120667] {CVE-2025-39955}
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119151] {CVE-2025-39883}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202511181542.p2.g581d48a.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/oc/commit/581d48a297ae8c89a7dbefedd6694b1ab300c082


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Yasmin Valim <ydesouza@redhat.com> - 0.24.0-4
changelog:
  - Check if firstboot args are defined and add them manually 
    Backport https://github.com/coreos/coreos-installer/pull/1699


author: Huijing Hei <hhei@redhat.com> - 0.24.0-5
changelog:
  - rootmap: Inject `mpath.wwid=$WWID` when on multipath
    Backport https://github.com/coreos/coreos-installer/pull/1676/commits/a40af0a3ec13c4fd49b34317e80f6c0bc845b46a
    Resolves RHEL-126696


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.71.1.el9_6]
changelog:
  - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126164]
  - block: don't freeze queue for updating queue limits (Ming Lei) [RHEL-111271]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202512012217.p2.g9d45edc.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/9d45edc58ca6d5240fc84d3d50eb7490aa683c16


author: Andrew McDermott <amcdermo@redhat.com> - 2.8.5-1.rhaos4.16
changelog:
  - Bump to 2.8.5
  - Delete existing carry patches related to 2.6
  - Carry fix for https://github.com/haproxy/haproxy/issues/2403
  - Fix for issue 2403 picked from https://git.haproxy.org/?p=haproxy-2.9.git;a=commit;h=bef2bc4cb6f4fa942d3659f25770cbfc137327b2
  - Resolves https://issues.redhat.com/browse/NE-1444


author: Andrew McDermott <amcdermo@redhat.com> - 2.8.5-2.rhaos4.16
changelog:
  - Resolve https://issues.redhat.com/browse/OCPBUGS-32369 (HAProxy consuming high cpu usage)
  - Carry fix for https://github.com/haproxy/haproxy/issues/2537
  - Fix for issue 2537 picked from https://git.haproxy.org/?p=haproxy.git;a=commit;h=4a9e3e102e192b9efd17e3241a6cc659afb7e7dc


author: Andrew McDermott <amcdermo@redhat.com> - 2.8.10-1.rhaos4.17
changelog:
  - Resolves https://issues.redhat.com/browse/NE-1761.
  - Drop old carry patches.
  - haproxy.spec: Optionally enable debug builds


author: Andrey Lebedev <alebedev@redhat.com> - 2.8.10-1.rhaos4.17
changelog:
  - Resolves https://issues.redhat.com/browse/OCPBUGS-60885.
  - Fixes excessive CPU usage when using 4096-bit RSA keys.
  - Backports the upstream fix for https://github.com/haproxy/haproxy/issues/3124.
  - Cherry-picked upstream commit1: http://git.haproxy.org/?p=haproxy.git;a=commit;h=7ea80cc5b66e9a9e8e5618532f1c6deb93385761.
  - Cherry-picked upstream commit2: http://git.haproxy.org/?p=haproxy.git;a=commit;h=1afaa7b59d6c407d68683b821f3142654a37b17e.
  - Behavior is enabled only when "option abortonclose" is set.


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.73.1.el9_6]
changelog:
  - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-90420]
  - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-90420]
  - s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114450]
  - s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114450]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.74.1.el9_6]
changelog:
  - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI KWF BOT) [RHEL-124104] {CVE-2025-39925}
  - can: j1939: implement NETDEV_UNREGISTER notification handler (CKI KWF BOT) [RHEL-124104] {CVE-2025-39925}
  - dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-129503]
  - dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-129503]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.75.1.el9_6]
changelog:
  - arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-130733]
  - arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-130733]
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-130733]
  - arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-130733]
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-130733]
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-130733]
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-130733]
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (Waiman Long) [RHEL-130733]
  - arm64: errata: Expand speculative SSBS workaround once more (Waiman Long) [RHEL-130733]
  - arm64: errata: Expand speculative SSBS workaround (again) (Waiman Long) [RHEL-130733]
  - arm64: cputype: Add Neoverse-N3 definitions (Waiman Long) [RHEL-130733]
  - arm64: cputype: Add Cortex-A725 definitions (Waiman Long) [RHEL-130733]
  - arm64: cputype: Add Cortex-X1C definitions (Waiman Long) [RHEL-130733]
  - mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-117744] {CVE-2025-39843}
  - slub: Reflow ___slab_alloc() (Audra Mitchell) [RHEL-117744] {CVE-2025-39843}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.76.1.el9_6]
changelog:
  - xfs: rework datasync tracking and execution (Pavel Reichl) [RHEL-135901]
  - xfs: rearrange code in xfs_inode_item_precommit (Pavel Reichl) [RHEL-135901]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.77.1.el9_6]
changelog:
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137146] {CVE-2025-68287}
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI KWF BOT) [RHEL-124603] {CVE-2025-39806}
  - sctp: detect and prevent references to a freed transport in sendmsg (CKI Backport Bot) [RHEL-130213] {CVE-2025-23142}
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128857] {CVE-2025-40176}
  - Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124128] {CVE-2025-39983}
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}
  - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (CKI Backport Bot) [RHEL-122893] {CVE-2025-39981}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.78.1.el9_6]
changelog:
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (Xiubo Li) [RHEL-137399] {CVE-2025-68285}
  - smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-127421]
  - smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-127421]
  - smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-127421]
  - smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-127421]
  - cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-127421]
  - smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-127421]
  - smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-127421]
  - smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-127421]
  - smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-127421]
  - smb: client: remove pointless cfid->has_lease check (Paulo Alcantara) [RHEL-127421]
  - smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-127421]
  - smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-127421]
  - smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-127421]
  - smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-127421]
  - smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-127421]
  - smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-127421]
  - smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-127421]
  - smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-127421]
  - smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-127421]
  - cifs: Fix null-ptr-deref by static initializing global lock (Paulo Alcantara) [RHEL-127421]
  - smb3 client: add way to show directory leases for improved debugging (Paulo Alcantara) [RHEL-127421]
  - cifs: add new field to track the last access time of cfid (Paulo Alcantara) [RHEL-127421]
  - smb: change return type of cached_dir_lease_break() to bool (Paulo Alcantara) [RHEL-127421]
  - smb: invalidate and close cached directory when creating child entries (Paulo Alcantara) [RHEL-127421]
  - smb: Use loff_t for directory position in cached_dirents (Paulo Alcantara) [RHEL-127421]
  - smb: Log an error when close_all_cached_dirs fails (Paulo Alcantara) [RHEL-127421]
  - smb: improve directory cache reuse for readdir operations (Paulo Alcantara) [RHEL-127421]
  - cifs: update the lock ordering comments with new mutex (Paulo Alcantara) [RHEL-127421]
  - smb: client: use ParentLeaseKey in cifs_do_create (Paulo Alcantara) [RHEL-127421]
  - smb: client: use ParentLeaseKey in open_cached_dir (Paulo Alcantara) [RHEL-127421]
  - smb: client: add ParentLeaseKey support (Paulo Alcantara) [RHEL-127421]
  - smb: client: Avoid race in open_cached_dir with lease breaks (Paulo Alcantara) [RHEL-127421]
  - net: ionic: map SKB after pseudo-header checksum prep (Mohammad Heib) [RHEL-126054]
  - net: ionic: add dma_wmb() before ringing TX doorbell (Mohammad Heib) [RHEL-126054]
  - NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113854] {CVE-2025-39697}


author: Roberto Bergantinos Corpas <rbergant@redhat.com> [5.14.0-570.79.1.el9_6]
changelog:
  - nbd: override creds to kernel when calling sock_{send,recv}msg() (Ming Lei) [RHEL-123844]
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (Arif Badar) [RHEL-132725] {CVE-2025-37891}
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129111] {CVE-2025-40154}
  - NFSD: Fix callback decoder status codes (Jay Shin) [RHEL-127658]
  - NFSD: Fix CB_GETATTR status fix (Jay Shin) [RHEL-127658]
  - NFSD: fix hang in nfsd4_shutdown_callback (Jay Shin) [RHEL-127666] {CVE-2025-21795}
  - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Jay Shin) [RHEL-127658]
  - KVM: arm64: Tear down vGIC on failed vCPU creation (Malaya Kumar Rout) [RHEL-129663] {CVE-2025-37849}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.80.1.el9_6]
changelog:
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131971] {CVE-2025-37819}
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CKI Backport Bot) [RHEL-132888] {CVE-2023-53034}
  - net: openvswitch: fix nested key length validation in the set() action (CKI Backport Bot) [RHEL-131803] {CVE-2025-37789}
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134447] {CVE-2025-40258}
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134427] {CVE-2025-40277}
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128888] {CVE-2025-40141}
  - drm/xe: Use local fence in error path of xe_migrate_clear (Xiubo Li) [RHEL-131994] {CVE-2025-37869}
  - drm/xe: Fix an out-of-bounds shift when invalidating TLB (Xiubo Li) [RHEL-129972] {CVE-2025-37761}
  - s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114497]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.81.1.el9_6]
changelog:
  - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Xiubo Li) [RHEL-134922] {CVE-2025-40251}
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136255] {CVE-2025-40318}
  - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Dick Kennedy) [RHEL-138046] {CVE-2025-38289}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.82.1.el9_6]
changelog:
  - io_uring: prevent opcode speculation (CKI KWF BOT) [RHEL-141478] {CVE-2025-21863}
  - tools/power turbostat: Add initial support for ClearwaterForest (David Arcari) [RHEL-138242]
  - net: atlantic: fix fragment overflow handling in RX path (CKI KWF BOT) [RHEL-139486] {CVE-2025-68301}
  - tty: n_tty: Fix buffer offsets when lookahead is used (Radostin Stoyanov) [RHEL-130035]
  - thermal: core: Change PM notifier priority to the minimum (Luis Claudio R. Goncalves) [RHEL-100435]
  - thermal: core: Synchronize suspend-prepare and post-suspend actions (Luis Claudio R. Goncalves) [RHEL-100435]
  - sched/core: Fix migrate_swap() vs. hotplug (Luis Claudio R. Goncalves) [RHEL-100435]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.84.1.el9_6]
changelog:
  - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139283] {CVE-2025-40248}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.85.1.el9_6]
changelog:
  - iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144216]
  - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144216]
  - s390/mm: Fix __ptep_rdp() inline assembly (CKI Backport Bot) [RHEL-143712]
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136941] {CVE-2025-40322}
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (CKI KWF BOT) [RHEL-141468] {CVE-2025-21647}
  - vrf: use RCU protection in l3mdev_l3_out() (CKI KWF BOT) [RHEL-141472] {CVE-2025-21791}
  - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (Mark Langsdorf) [RHEL-116417]
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CKI Backport Bot) [RHEL-141456] {CVE-2024-54456}
  - workqueue: Put the pwq after detaching the rescuer from the pool (CKI KWF BOT) [RHEL-140030] {CVE-2025-21786}
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139697]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139697]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139697]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139697]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139697]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139697]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139697]
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-139697]
  - dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139697]
  - dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139697]
  - dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139697]
  - dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139697]
  - dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139697]
  - dpll: add reference sync get/set (Ivan Vecera) [RHEL-139697]
  - dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139697]
  - netlink: specs: dpll: replace underscores with dashes in names (Ivan Vecera) [RHEL-139697]
  - dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139697]
  - dpll: fix xa_alloc_cyclic() error handling (Ivan Vecera) [RHEL-139697]
  - dpll: Add an assertion to check freq_supported_num (Ivan Vecera) [RHEL-139697]
  - md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-126531]
  - md: delete mddev kobj before deleting gendisk kobj (Nigel Croxon) [RHEL-126531]
  - md: add legacy_async_del_gendisk mode (Nigel Croxon) [RHEL-126531]
  - md: Don't clear MD_CLOSING until mddev is freed (Nigel Croxon) [RHEL-126531]
  - md: fix create on open mddev lifetime regression (Nigel Croxon) [RHEL-126531]
  - md: call del_gendisk in control path (Nigel Croxon) [RHEL-126531]
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Xiubo Li) [RHEL-134355] {CVE-2025-38022}
  - nvme: tcp: Fix compilation warning with W=1 (John Meneghini) [RHEL-129927]
  - nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (John Meneghini) [RHEL-129927]
  - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134377] {CVE-2025-38051}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.86.1.el9_6]
changelog:
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136962] {CVE-2025-40294}
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140259] {CVE-2025-68349}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136818] {CVE-2025-38568}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.87.1.el9_6]
changelog:
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137332] {CVE-2025-38730}
  - io_uring/kbuf: add io_kbuf_commit() helper (Jeff Moyer) [RHEL-137332]
  - io_uring/kbuf: use 'bl' directly rather than req->buf_list (Jeff Moyer) [RHEL-137332]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137682] {CVE-2025-40304}
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-141403]
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137097] {CVE-2025-40271}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.88.1.el9_6]
changelog:
  - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-146048]
  - s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118880]
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Piyush Thange) [RHEL-136908] {CVE-2025-40269}
  - x86/sev: Guard sev_evict_cache() with CONFIG_AMD_MEM_ENCRYPT (Paolo Bonzini) [RHEL-128029]
  - x86/sev: Evict cache lines during SNP memory validation (Paolo Bonzini) [RHEL-128029]
  - net: vxlan: prevent NULL deref in vxlan_xmit_one (Arif Badar) [RHEL-133368]
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CKI Backport Bot) [RHEL-131390] {CVE-2025-39933}
  - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling (Xiubo Li) [RHEL-132022] {CVE-2025-37882}
  - i40e: add rh_phys_port_name mod option to behave like upstream (Xiubo Li) [RHEL-128236]
  - ice: add rh_phys_port_name mod option to behave like upstream (Xiubo Li) [RHEL-128236]


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202602061949.p2.g24755b6.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/oc/commit/24755b6e82745a4dfa5a6db4b467564c237f244c


author:
  AOS Automation Release Team <noreply@redhat.com> - 4.19.25-202603020814.p0.g3eb3c59.assembly.4.19.25

changelog:
  - Update to source commit https://github.com/openshift/microshift/commit/3eb3c5996a90f5e841140a912e4c0a4f42644665


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.89.1.el9_6]
changelog:
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138034] {CVE-2025-38349}
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137366] {CVE-2025-39760}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.90.1.el9_6]
changelog:
  - ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148165]
  - dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146356]
  - dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-147458]
  - dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-147458]
  - dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-147458]
  - squashfs: fix memory leak in squashfs_fill_super (CKI Backport Bot) [RHEL-138017] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138017] {CVE-2025-38415}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.91.1.el9_6]
changelog:
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137990]
  - io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137990]
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137990] {CVE-2025-38106}
  - io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137990]
  - io_uring/sqpoll: annotate debug task == current with data_race() (Jeff Moyer) [RHEL-137990]
  - NFS: remove revoked delegation from server's delegation list (CKI Backport Bot) [RHEL-134236]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.92.1.el9_6]
changelog:
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Chandrakanth Patil) [RHEL-132218] {CVE-2025-37861}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.93.1.el9_6]
changelog:
  - scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143735]
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-118728]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.94.1.el9_6]
changelog:
  - bpf, sockmap: Avoid using sk_socket after free when sending (Piyush Thange) [RHEL-137960] {CVE-2025-38154}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202602241905.p2.g346896b.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/346896bae752bb9def8cacca75fdc7f7dcae9496


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.95.1.el9_6]
changelog:
  - i40e: validate ring_len parameter against hardware-specific values (Arif Badar) [RHEL-141721]
  - mm/hugetlb: ignore hugepage kernel args if hugepages are unsupported (CKI Backport Bot) [RHEL-144088]
  - md/md-bitmap: fix GPF in bitmap_get_stats() (Nigel Croxon) [RHEL-118895]
  - md/md-bitmap: fix stats collection for external bitmaps (Nigel Croxon) [RHEL-118895]
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Nigel Croxon) [RHEL-118895]
  - md/raid1: fix data lost for writemostly rdev (CKI Backport Bot) [RHEL-143623]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI KWF BOT) [RHEL-141464] {CVE-2024-56603}
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (CKI Backport Bot) [RHEL-137842] {CVE-2025-38129}
  - drm/xe: Make dma-fences compliant with the safe access rules (Marc Milgram) [RHEL-122267] {CVE-2025-38703}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.96.1.el9_6]
changelog:
  - dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137951] {CVE-2025-38141}
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (CKI KWF BOT) [RHEL-141477] {CVE-2025-22056}
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137068] {CVE-2025-38024}
  - x86/tdx: Fix "in-kernel MMIO" check (Vitaly Kuznetsov) [RHEL-131698] {CVE-2024-47727}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.97.1.el9_6]
changelog:
  - exfat: fix double free in delayed_free (CKI KWF BOT) [RHEL-146402] {CVE-2025-38206}
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143543] {CVE-2025-71085}
  - RDMA/rxe: Fix the qp flush warnings in req (CKI KWF BOT) [RHEL-141452] {CVE-2024-53229}
  - inetpeer: do not get a refcount in inet_getpeer() (CKI Backport Bot) [RHEL-116120]
  - inetpeer: update inetpeer timestamp in inet_getpeer() (CKI Backport Bot) [RHEL-116120]
  - inetpeer: remove create argument of inet_getpeer() (CKI Backport Bot) [RHEL-116120]
  - inetpeer: remove create argument of inet_getpeer_v[46]() (CKI Backport Bot) [RHEL-116120]
  - ipv4/route: avoid unused-but-set-variable warning (CKI Backport Bot) [RHEL-116120]
  - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Guillaume Nault) [RHEL-138492]
  - uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133871]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.98.1.el9_6]
changelog:
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI KWF BOT) [RHEL-150190] {CVE-2025-40240}
  - perf test: Ensure lock contention using pipe mode (Michael Petlan) [RHEL-141703]
  - svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142789] {CVE-2025-68811}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.99.1.el9_6]
changelog:
  - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Marc Milgram) [RHEL-137202]
  - s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-137202]
  - dpll: zl3073x: Fix output pin phase adjustment sign (CKI Backport Bot) [RHEL-149763]
  - macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144124] {CVE-2026-23001}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.100.1.el9_6]
changelog:
  - bridge: mcast: Fix use-after-free during router port configuration (CKI Backport Bot) [RHEL-138431] {CVE-2025-38248}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.101.1.el9_6]
changelog:
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Davide Caratti) [RHEL-141465]
  - can: j1939: j1939_session_new(): fix skb reference counting (CKI KWF BOT) [RHEL-141465] {CVE-2024-56645}
  - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125463] {CVE-2025-40096}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.102.1.el9_6]
changelog:
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Arif Badar) [RHEL-150225]
  - macvlan: fix error recovery in macvlan_common_newlink() (Arif Badar) [RHEL-150225] {CVE-2026-23209}
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-149473] {CVE-2025-22075}
  - ice: fix adding AQ LLDP filter for VF (Ivan Vecera) [RHEL-143686]
  - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-143686]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Ivan Vecera) [RHEL-143686]
  - ice: dpll: fix rclk pin state get and misplaced header macros (Ivan Vecera) [RHEL-148558]
  - ice: dpll: Support E825-C SyncE and dynamic pin discovery (Ivan Vecera) [RHEL-148558]
  - drivers: Add support for DPLL reference count tracking (Ivan Vecera) [RHEL-148558]
  - redhat: configs: Enable CONFIG_DPLL_REFCNT_TRACKER for debug (Ivan Vecera) [RHEL-148558]
  - dpll: Add reference count tracking support (Ivan Vecera) [RHEL-148558]
  - dpll: Enhance and consolidate reference counting logic (Ivan Vecera) [RHEL-148558]
  - dpll: zl3073x: Add support for mux pin type (Ivan Vecera) [RHEL-148558]
  - dpll: Support dynamic pin index allocation (Ivan Vecera) [RHEL-148558]
  - dpll: Add notifier chain for dpll events (Ivan Vecera) [RHEL-148558]
  - dpll: zl3073x: Associate pin with fwnode handle (Ivan Vecera) [RHEL-148558]
  - dpll: Allow associating dpll pin with a firmware node (Ivan Vecera) [RHEL-148558]
  - ice: fix devlink reload call trace (Michal Schmidt) [RHEL-143686]
  - ice: add missing ice_deinit_hw() in devlink reinit path (Michal Schmidt) [RHEL-143686]
  - ice: Fix persistent failure in ice_get_rxfh (Michal Schmidt) [RHEL-143686]
  - ice: Fix incorrect timeout ice_release_res() (Michal Schmidt) [RHEL-143686]
  - ice: Avoid detrimental cleanup for bond during interface stop (Michal Schmidt) [RHEL-143686]
  - ice: initialize ring_stats->syncp (Michal Schmidt) [RHEL-143686]
  - ice: remove duplicate call to ice_deinit_hw() on error paths (Michal Schmidt) [RHEL-143686]
  - ice: move ice_deinit_dev() to the end of deinit paths (Michal Schmidt) [RHEL-143686]
  - ice: extract ice_init_dev() from ice_init() (Michal Schmidt) [RHEL-143686]
  - ice: move ice_init_pf() out of ice_init_dev() (Michal Schmidt) [RHEL-143686]
  - ice: move udp_tunnel_nic and misc IRQ setup into ice_init_pf() (Michal Schmidt) [RHEL-143686]
  - iavf: add RSS support for GTP protocol via ethtool (Michal Schmidt) [RHEL-143686]
  - ice: implement GTP RSS context tracking and configuration (Michal Schmidt) [RHEL-143686]
  - ice: add virtchnl definitions and static data for GTP RSS (Michal Schmidt) [RHEL-143686]
  - ice: ice_init_pf: destroy mutexes and xarrays on memory alloc failure (Michal Schmidt) [RHEL-143686]
  - ice: refactor to use helpers (Michal Schmidt) [RHEL-143686]
  - ice: add E830 Earliest TxTime First Offload support (Michal Schmidt) [RHEL-143686]
  - ice, libie: move fwlog code to libie (Michal Schmidt) [RHEL-143686]
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Michal Schmidt) [RHEL-143686] {CVE-2025-71087}
  - iavf: clarify VLAN add/delete log messages and lower log level (Michal Schmidt) [RHEL-143686]
  - ice: fix comment typo and correct module format string (Michal Schmidt) [RHEL-143686]
  - ice: fix PTP cleanup on driver removal in error path (Michal Schmidt) [RHEL-143686] {CVE-2025-68215}
  - ice: Extend PTYPE bitmap coverage for GTP encapsulated flows (Michal Schmidt) [RHEL-143686]
  - ice: improve TCAM priority handling for RSS profiles (Michal Schmidt) [RHEL-143686]
  - ice: add flow parsing for GTP and new protocol field support (Michal Schmidt) [RHEL-143686]
  - ice: Allow 100M speed for E825C SGMII device (Michal Schmidt) [RHEL-143686]
  - ice: fix usage of logical PF id (Michal Schmidt) [RHEL-143686]
  - ice: fix destination CGU for dual complex E825 (Michal Schmidt) [RHEL-143686]
  - ice: fix lane number calculation (Michal Schmidt) [RHEL-143686]
  - ice: move ice_init_interrupt_scheme() prior ice_init_pf() (Michal Schmidt) [RHEL-143686]
  - ice: move service task start out of ice_init_pf() (Michal Schmidt) [RHEL-143686]
  - ice: enforce RTNL assumption of queue NAPI manipulation (Michal Schmidt) [RHEL-143686]
  - ice: implement transmit hardware timestamp statistics (Michal Schmidt) [RHEL-143686]
  - ice: add tracking of good transmit timestamps (Michal Schmidt) [RHEL-143686]
  - ice: implement ethtool standard stats (Michal Schmidt) [RHEL-143686]
  - libie: fix string names for AQ error codes (Michal Schmidt) [RHEL-143686]
  - iavf: fix proper type for error code in iavf_resume() (Michal Schmidt) [RHEL-143686]
  - ice: Remove deprecated ice_lag_move_new_vf_nodes() call (Michal Schmidt) [RHEL-143686]
  - ice: move ice_qp_[ena|dis] for reuse (Michal Schmidt) [RHEL-143686]
  - ice: reregister fwlog after driver reinit (Michal Schmidt) [RHEL-143686]
  - ice: prepare for moving file to libie (Michal Schmidt) [RHEL-143686]
  - ice: move debugfs code to fwlog (Michal Schmidt) [RHEL-143686]
  - libie, ice: move fwlog admin queue to libie (Michal Schmidt) [RHEL-143686]
  - ice: drop driver specific structure from fwlog code (Michal Schmidt) [RHEL-143686]
  - ice: check for PF number outside the fwlog code (Michal Schmidt) [RHEL-143686]
  - ice: move out debugfs init from fwlog (Michal Schmidt) [RHEL-143686]
  - ice: allow calling custom send function in fwlog (Michal Schmidt) [RHEL-143686]
  - ice: add pdev into fwlog structure and use it for logging (Michal Schmidt) [RHEL-143686]
  - ice: introduce ice_fwlog structure (Michal Schmidt) [RHEL-143686]
  - ice: drop ice_pf_fwlog_update_module() (Michal Schmidt) [RHEL-143686]
  - ice: move get_fwlog_data() to fwlog file (Michal Schmidt) [RHEL-143686]
  - ice: make fwlog functions static (Michal Schmidt) [RHEL-143686]
  - ice: finish virtchnl.c split into rss.c (Michal Schmidt) [RHEL-143686]
  - ice: extract virt/rss.c: cleanup - p2 (Michal Schmidt) [RHEL-143686]
  - ice: extract virt/rss.c: cleanup - p1 (Michal Schmidt) [RHEL-143686]
  - ice: split RSS stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-143686]
  - ice: split RSS stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-143686]
  - ice: finish virtchnl.c split into queues.c (Michal Schmidt) [RHEL-143686]
  - ice: extract virt/queues.c: cleanup - p3 (Michal Schmidt) [RHEL-143686]
  - ice: extract virt/queues.c: cleanup - p2 (Michal Schmidt) [RHEL-143686]
  - ice: extract virt/queues.c: cleanup - p1 (Michal Schmidt) [RHEL-143686]
  - ice: split queue stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-143686]
  - ice: split queue stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-143686]
  - ice: fix incorrect counter for buffer allocation failures (Michal Schmidt) [RHEL-143686]
  - ice: add virt/ and move ice_virtchnl* files there (Michal Schmidt) [RHEL-143686]
  - ice: Implement support for SRIOV VFs across Active/Active bonds (Michal Schmidt) [RHEL-143686]
  - ice: cleanup capabilities evaluation (Michal Schmidt) [RHEL-143686]
  - ice: Cleanup variable initialization in LAG code (Michal Schmidt) [RHEL-143686]
  - ice: move LAG function in code to prepare for Active-Active (Michal Schmidt) [RHEL-143686]
  - ice: Add driver specific prefix to LAG defines (Michal Schmidt) [RHEL-143686]
  - ice: replace u8 elements with bool where appropriate (Michal Schmidt) [RHEL-143686]
  - ice: Remove casts on void pointers in LAG code (Michal Schmidt) [RHEL-143686]
  - ice: Don't use %pK through printk or tracepoints (Michal Schmidt) [RHEL-143686]
  - net: Fix typos [partial:ice] (Michal Schmidt) [RHEL-143686]
  - iavf: use libie_aq_str (Michal Schmidt) [RHEL-143686]
  - ice: use libie_aq_str (Michal Schmidt) [RHEL-143686]
  - libie: add adminq helper for converting err to str (Michal Schmidt) [RHEL-143686]
  - iavf: use libie adminq descriptors (Michal Schmidt) [RHEL-143686]
  - i40e: use libie adminq descriptors [partial:ice,libie] (Michal Schmidt) [RHEL-143686]
  - ixgbe: use libie adminq descriptors [partial:libie] (Michal Schmidt) [RHEL-143686]
  - ice, libie: move generic adminq descriptors to lib (Michal Schmidt) [RHEL-143686]
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Michal Schmidt) [RHEL-143686] {CVE-2025-38664}
  - ice: breakout common LAG code into helpers (Michal Schmidt) [RHEL-143686]
  - ice: convert ice_add_prof() to bitmap (Michal Schmidt) [RHEL-143686]
  - ice: add E835 device IDs (Michal Schmidt) [RHEL-143686]
  - ice: add 40G speed to Admin Command GET PORT OPTION (Michal Schmidt) [RHEL-143686]
  - ice: check correct pointer in fwlog debugfs (Michal Schmidt) [RHEL-143686]
  - ice: add NULL check in eswitch lag check (Michal Schmidt) [RHEL-143686] {CVE-2025-38526}
  - ice: introduce ice_get_vf_by_dev() wrapper (Michal Schmidt) [RHEL-143686]
  - ice: avoid rebuilding if MSI-X vector count is unchanged (Michal Schmidt) [RHEL-143686]
  - ice: use pci_iov_vf_id() to get VF ID (Michal Schmidt) [RHEL-143686]
  - ice: expose VF functions used by live migration (Michal Schmidt) [RHEL-143686]
  - ice: move ice_vsi_update_l2tsel to ice_lib.c (Michal Schmidt) [RHEL-143686]
  - ice: save RSS hash configuration for migration (Michal Schmidt) [RHEL-143686]
  - ice: add functions to get and set Tx queue context (Michal Schmidt) [RHEL-143686]
  - ice: add support for reading and unpacking Rx queue context (Michal Schmidt) [RHEL-143686]
  - eth: ice: drop the dead code related to rss_contexts (Michal Schmidt) [RHEL-143686]
  - ice: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-143686]
  - ice: add ref-sync dpll pins (Michal Schmidt) [RHEL-143686]
  - net: ice: Perform accurate aRFS flow match (Michal Schmidt) [RHEL-143686]
  - ice: add phase offset monitor for all PPS dpll inputs (Michal Schmidt) [RHEL-143686]
  - ice: add a separate Rx handler for flow director commands (Michal Schmidt) [RHEL-143686]
  - ice: change SMA pins to SDP in PTP API (Michal Schmidt) [RHEL-143686]
  - ice: redesign dpll sma/u.fl pins control (Michal Schmidt) [RHEL-143686]
  - ice: add link_down_events statistic (Michal Schmidt) [RHEL-143686]
  - net: intel: move RSS packet classifier types to libie (Michal Schmidt) [RHEL-143686]
  - net: intel: rename 'hena' to 'hashcfg' for clarity (Michal Schmidt) [RHEL-143686]
  - ice: make const read-only array dflt_rules static (Michal Schmidt) [RHEL-143686]
  - ice: improve error message for insufficient filter space (Michal Schmidt) [RHEL-143686]
  - ice: enable LLDP TX for VFs through tc (Michal Schmidt) [RHEL-143686]
  - ice: remove headers argument from ice_tc_count_lkups (Michal Schmidt) [RHEL-143686]
  - ice: receive LLDP on trusted VFs (Michal Schmidt) [RHEL-143686]
  - ice: do not add LLDP-specific filter if not necessary (Michal Schmidt) [RHEL-143686]
  - ice: fix check for existing switch rule (Michal Schmidt) [RHEL-143686]
  - ice: clear NAPI's IRQ numbers in ice_vsi_clear_napi_queues() (Michal Schmidt) [RHEL-143686]
  - ice: refactor ICE_TC_FLWR_FIELD_ENC_OPTS (Michal Schmidt) [RHEL-143686]
  - Revert "ice: Fix ice VF reset during iavf initialization" (Michal Schmidt) [RHEL-143686]
  - ice: Fix ice VF reset during iavf initialization (Michal Schmidt) [RHEL-143686]
  - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136287]
  - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136287]
  - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136287]
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Ewan D. Milne) [RHEL-136287]
  - scsi: st: ERASE does not change tape location (Ewan D. Milne) [RHEL-136287]
  - scsi: st: Fix array overflow in st_setup() (Ewan D. Milne) [RHEL-136287] {CVE-2025-37857}
  - scsi: st: Add sysfs file position_lost_in_reset (Ewan D. Milne) [RHEL-136287]
  - scsi: st: Modify st.c to use the new scsi_error counters (Ewan D. Milne) [RHEL-136287]
  - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (Ewan D. Milne) [RHEL-136287]
  - scsi: st: Restore some drive settings after reset (Ewan D. Milne) [RHEL-136287]
  - scsi: st: Fix input/output error on empty drive reset (Ewan D. Milne) [RHEL-136287]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.103.1.el9_6]
changelog:
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143193] {CVE-2025-68800}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202603122218.p2.ga674efa.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/a674efabac8b5044e6256ce4e2385914be215376


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202603132148.p2.gb2a93a6.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/oc/commit/b2a93a639c07ebf4d547d10877b6c13f65583248


author: Daniel Kreling <dkreling@redhat.com> - 3.25.0-1
changelog:
  - Update to kata-containers 3.25.0
    Resolves: KATA-4633
  - Use pgpu kind in the CDI annotation to attach a NVIDIA GPU
    Resolves: KATA-4303
  - Add support to build initrds for kata-cc, kata-nvidia-gpu, kata-nvidia-gpu-cc
  - Add default kata policies for coco and non-coco runtime classes
    RequiredBy: KATA-3976
  - Add storage and security modules to the initrds
    Resolves: KATA-3972
  - Add crio configurations for the new runtime classes
    Resolves: KATA-3702
    Resolves: KATA-4201
  - Add pre-built initrds for x86_64
    Resolves: KATA-4202
    Resolves: KATA-3575
  - Set SELinux container_use_devices to 1 to grant access to /dev/sev


author: Daniel Kreling <dkreling@redhat.com> - 3.25.0-2
changelog:
  - Fix firmware path for TDX.
  - Add support for device cold plug
  - Update sources file with initrd tarball with GPU support for CC
  - Normalize IOMMUFD device IDs in CDI coldplug
  - Set shared_fs to virtio-fs for NVIDIA GPU runtime class
  - Remove runtime_pull_image entry from the crio config file
  - Write IBM SE kernel to the /var directory
  - IBM-SE: set block_device_driver to virtio-blk
    - Resolves: KATA-4685


author: Daniel Kreling <dkreling@redhat.com> - 3.25.0-3
changelog:
  - Remove "Normalize IOMMUFD device IDs in CDI coldplug" patch
  - Rename kata-nvidia-gpu-cc to kata-cc-nvidia-gpu
    Resolves: KATA-4750
  - Add kata-addon-kernel.sh and kata-addon-kernel.service
    Resolves: KATA-4611
  - Fix multi-gpu cdi annotation handling with iommufd
  - Kata RPM version check for ibm-se


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.104.1.el9_6]
changelog:
  - KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134766]
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109041]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109041]
  - net: atm: fix /proc/net/atm/lec handling (Siva Adavi) [RHEL-146426] {CVE-2025-38180}
  - net: atm: add lec_mutex (Siva Adavi) [RHEL-146426] {CVE-2025-38180}
  - perf jitdump: Add sym/str-tables to build-ID generation (Michael Petlan) [RHEL-139921]
  - perf genelf: Fix NO_LIBDW=1 build (Michael Petlan) [RHEL-139921]
  - perf genelf: Remove libcrypto dependency and use built-in sha1() (Michael Petlan) [RHEL-139921]
  - perf util: add a basic SHA-1 implementation (Michael Petlan) [RHEL-139921]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-123913]
  - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-123913]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-123913]
  - net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-132922]
  - net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-132922]
  - net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-132922]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.105.1.el9_6]
changelog:
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Siva Adavi) [RHEL-153268] {CVE-2026-23231}
  - net: mana: Reduce waiting time if HWC not responding (Maxim Levitsky) [RHEL-151606]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.106.1.el9_6]
changelog:
  - selftests: kvm: try getting XFD and XSAVE state out of sync (CKI Backport Bot) [RHEL-141812]
  - selftests: kvm: replace numbering of sync points with actions (CKI Backport Bot) [RHEL-141812]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (CKI Backport Bot) [RHEL-141812]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.107.1.el9_6]
changelog:
  - redhat: conflict with unsupported shim on x86/aarch64 (Vitaly Kuznetsov) [RHEL-162191]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (CKI Backport Bot) [RHEL-150476] {CVE-2026-23144}
  - bonding: fix use-after-free due to enslave fail after slave array update (Arif Badar) [RHEL-152379] {CVE-2026-23171}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI KWF BOT) [RHEL-150421] {CVE-2026-23193}
  - net/sched: cls_u32: use skb_header_pointer_careful() (CKI Backport Bot) [RHEL-150402] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (CKI Backport Bot) [RHEL-150402] {CVE-2026-23204}
  - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-150146]
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-150146]
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-150146]
  - Bluetooth: hci_uart: Fix another race during initialization (David Marlin) [RHEL-150146]
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-150146]
  - Bluetooth: hci_uart: fix race during initialization (David Marlin) [RHEL-150146]
  - redhat/configs: Enable early lockdown for Arm (CKI Backport Bot) [RHEL-129495]
  - arm64: add early lockdown for secure boot (CKI Backport Bot) [RHEL-129495]
  - efi: pass secure boot mode to kernel proper (CKI Backport Bot) [RHEL-129495]
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149747] {CVE-2026-23111}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.108.1.el9_6]
changelog:
  - ice: fix U.FL pin state set affecting paired SMA pin (Petr Oros) [RHEL-162177]
  - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162180]
  - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162183]
  - rxrpc: Fix recvmsg() unconditional requeue (Arif Badar) [RHEL-147229] {CVE-2026-23066}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.109.1.el9_6]
changelog:
  - iavf: fix reset_task for early reset event (Michal Schmidt) [RHEL-160946]
  - migrate: correct lock ordering for hugetlb file folios (CKI KWF BOT) [RHEL-147265] {CVE-2026-23097}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.110.1.el9_6]
changelog:
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Deepakkumar Karn) [RHEL-167015] {CVE-2026-31402}
  - crypto: iaa - Optimize rebalance_wq_table() (Jay Shin) [RHEL-137271]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.111.1.el9_6]
changelog:
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159221] {CVE-2025-68741}
  - nfsd: fix UAF when access ex_uuid or ex_stats (Olga Kornievskaia) [RHEL-141451] {CVE-2024-53216}
  - SUNRPC: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-141451] {CVE-2024-53216}
  - nfsd: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-141451] {CVE-2024-53216}
  - SUNRPC: introduce cache_check_rcu to help check in rcu context (Olga Kornievskaia) [RHEL-141451] {CVE-2024-53216}
  - RDMA/core: Fix ENODEV error for iWARP test over vlan (CKI Backport Bot) [RHEL-128545]
  - cifs: Fix deadlock in cifs_writepages during reconnect (Paulo Alcantara) [RHEL-134233]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.112.1.el9_6]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172197] {CVE-2026-31431}
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172197] {CVE-2026-31431}
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172197] {CVE-2026-31431}
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172197] {CVE-2026-31431}
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172197] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172197] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172197] {CVE-2026-31431}
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172197] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172197] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172197] {CVE-2026-31431}
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170757] {CVE-2026-31532}
  - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171377]
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-171377]
  -  Add NVIDIA Jetson and Bluefield signing keys for OOT modules (Enrique Belarte Luque) [RHEL-170934]
  - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (CKI KWF BOT) [RHEL-166857]
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153720] {CVE-2026-23401}
  - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164440]
  - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164440]
  - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164440]
  - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164440]
  - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164440]
  - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156876] {CVE-2026-23243}
  - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158205]
  - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154093]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.113.1.el9_6]
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174562] {CVE-2026-43284}


author:
  AOS Automation Release Team <noreply@redhat.com> - 4.19.32-202605212036.p0.g27d51c3.assembly.4.19.32

changelog:
  - Update to source commit https://github.com/openshift/microshift/commit/27d51c390b3d93aed081226ecb8b241708977380


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.114.1.el9_6]
changelog:
  - redhat/configs: enable CONFIG_SCLP_OFB for s390x (CKI KWF BOT) [RHEL-172925]
  - x86/kexec: Copy ACPI root pointer address from config table (Jay Shin) [RHEL-168730]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.115.1.el9_6]
changelog:
  - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171827]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171827]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172255]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-171827]
  - Revert "ice: fix U.FL pin state set affecting paired SMA pin" (Petr Oros) [RHEL-171827]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170699]
  - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170699]
  - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170699]
  - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170699]
  - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169632]
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (CKI Backport Bot) [RHEL-142599]
  - mm/uffd: add missing pte_mkdirty() to mfill_atomic_install_pte() (CKI Backport Bot) [RHEL-142997]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.116.1.el9_6]
changelog:
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176208] {CVE-2026-46300}
  - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176208] {CVE-2026-46300}
  - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176208] {CVE-2026-46300}
  - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176463] {CVE-2026-46333}


author: Daniel Kreling <dkreling@redhat.com> - 3.25.0-6
changelog:
  - Fix shim v2 crash when using `oc exec`
    Resolves: KATA-4901
  - Fix CVE-2026-41326
    Resolves: KATA-4946
  - Bump release to 3.25.0-6


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.117.1.el9_6]
changelog:
  - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174334]
  - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174334]
  - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174334]
  - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174099] {CVE-2026-43163}
  - dpll: make the "tracker" argument optional, default NULL (Michal Schmidt) [RHEL-174822]
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI KWF BOT) [RHEL-157326] {CVE-2026-23270}
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (Arif Badar) [RHEL-168066] {CVE-2026-31419}
  - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI KWF BOT) [RHEL-150244] {CVE-2026-23210}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150447] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150447] {CVE-2025-39766}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.118.1.el9_6]
changelog:
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI KWF BOT) [RHEL-171153] {CVE-2026-31685}
  - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-171798] {CVE-2025-38653}
  - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-171798] {CVE-2025-38653}
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (Abhi Das) [RHEL-171798] {CVE-2025-38653}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171428] {CVE-2026-31607}
  - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160457] {CVE-2026-23392}
  - nbd: defer config unlock in nbd_genl_connect (CKI KWF BOT) [RHEL-166948] {CVE-2025-68366}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.119.1.el9_6]
changelog:
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172668] {CVE-2026-43038}
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172644] {CVE-2026-43037}
  - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172819] {CVE-2026-31709}
  - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172819] {CVE-2026-31709}
  - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172819] {CVE-2026-31709}
  - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172819] {CVE-2026-31709}
  - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172819] {CVE-2026-31709}
  - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172819]
  - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172819]
  - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172819]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.120.1.el9_6]
changelog:
  - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170537] {CVE-2026-31508}
  - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169934]
  - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169934]
  - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169934]
  - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169934]
  - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169934]
  - sctp: discard stale INIT after handshake completion (Arif Badar) [RHEL-178272]
  - netfilter: skip recording stale or retransmitted INIT (Arif Badar) [RHEL-178272]
  - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173856] {CVE-2026-43110}
  - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174220] {CVE-2026-43190}
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165562] {CVE-2026-23216}
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143878] {CVE-2026-22990}
  - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142097] {CVE-2025-71116}
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI KWF BOT) [RHEL-166985] {CVE-2026-23455}
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166925] {CVE-2025-68724}
  - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-148783] {CVE-2025-71089}
  - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-148783] {CVE-2025-71089}
  - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143896] {CVE-2026-22984}
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-128978 RHEL-129015 RHEL-129083] {CVE-2025-40170}
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-128978 RHEL-129015 RHEL-129083] {CVE-2025-40135}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128978 RHEL-129015 RHEL-129083] {CVE-2025-40158}
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128978 RHEL-129015 RHEL-129083]
  - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128978 RHEL-129015 RHEL-129083]
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128978 RHEL-129015 RHEL-129083]
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128978 RHEL-129015 RHEL-129083]
  - net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (Hangbin Liu) [RHEL-128978 RHEL-129015 RHEL-129083]
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Guillaume Nault) [RHEL-128978 RHEL-129015 RHEL-129083]
  - book3s64/hash: Remove kfence support temporarily (CKI Backport Bot) [RHEL-135573]
  - mm/debug_vm_pgtable: clear page table entries at destroy_args() (CKI Backport Bot) [RHEL-128733]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.121.1.el9_6]
changelog:
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179668] {CVE-2026-45898}
  - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-168926]
  - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-168926]
  - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-168926]
  - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-168926]
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-168926]
  - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-168926]
  - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-168926]
  - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-168926]
  - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-168926]
  - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-168926]
  - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-168926]
  - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-168926]
  - lib/scatterlist: Add SG_MITER_LOCAL and use it (Ilya Dryomov) [RHEL-168926]
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174042] {CVE-2026-43158}
  - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174042] {CVE-2026-43158}
  - ice: fix stats array overflow when VF requests more queues (CKI Backport Bot) [RHEL-177524]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Arif Badar) [RHEL-173881] {CVE-2026-43116}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.122.1.el9_6]
changelog:
  - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183129]
  - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180021] {CVE-2026-46166}
  - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177873] {CVE-2026-46323}
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130016] {CVE-2025-40168}
  - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126891] {CVE-2025-40064}
  - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178942] {CVE-2026-46243}
  - wifi: mac80211: remove station if connection prep fails (Arif Badar) [RHEL-180119] {CVE-2026-46125}
  - wifi: mac80211: verify state before connection (Arif Badar) [RHEL-180119]
  - mm/page_alloc: clear page->private in free_pages_prepare() (CKI KWF BOT) [RHEL-174748] {CVE-2026-43303}
  - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-161145]
  - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-161145]
  - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-161145] {CVE-2024-57883}
  - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-161145]
  - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-161145]
  - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-161145]
  - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-161145]
  - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-161145]
  - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-161145]
  - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-161145] {CVE-2026-23100}
  - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-161145]
  - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-161145]
  - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-161145] {CVE-2025-39845}
  - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-161145]
  - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-161145] {CVE-2025-39844}
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175439]
  - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-150463] {CVE-2026-23136}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202606111920.p2.g6282230.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/cloud-provider-azure/commit/6282230dc14b5bdc5ae902bfdf4aa3d2ce1fdcbd


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.123.1.el9_6]
changelog:
  - net/sched: fix pedit partial COW leading to page cache corruption (Arif Badar) [RHEL-177388] {CVE-2026-46331}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.124.1.el9_6]
changelog:
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI KWF BOT) [RHEL-179995] {CVE-2026-46176}
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CKI KWF BOT) [RHEL-179977] {CVE-2026-46181}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171504] {CVE-2026-31669}
  - s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-183316]
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CKI Backport Bot) [RHEL-178407] {CVE-2026-43501}
  - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-174000] {CVE-2026-43125}
  - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-174000] {CVE-2026-43125}
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI KWF BOT) [RHEL-181945] {CVE-2026-46244}
  - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180007] {CVE-2026-46173}
  - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179710] {CVE-2026-45852}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179866] {CVE-2026-46227}
  - netfilter: flowtable: strictly check for maximum number of actions (Arif Badar) [RHEL-176916] {CVE-2026-43329}
  - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174028] {CVE-2026-43128}
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (CKI Backport Bot) [RHEL-174469]
  - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172991]
  - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172991]
  - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172991]
  - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172991]
  - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172991]
  - iavf: allow changing VLAN state without calling PF (Michal Schmidt) [RHEL-172991]
  - ALSA: aloop: Fix racy access at PCM trigger (CKI KWF BOT) [RHEL-150129] {CVE-2026-23191}
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI KWF BOT) [RHEL-141469] {CVE-2025-21648}
  - cachestat: fix page cache statistics permission checking (CKI KWF BOT) [RHEL-141470] {CVE-2025-21691}


author: AOS Automation Release Team <noreply@redhat.com> - 4.19.0-202606301915.p2.g63adf01.assembly.stream
changelog:
  - Update to source commit https://github.com/openshift/kubernetes/commit/63adf010aa20e104c0b7043b47f42f50c9f72b17


author: Jens Freimann <jfreiman@redhat.com> - 3.31.0-3
changelog:
  - Fix kata-nvidia-gpu firmware path: clear firmware= so QEMU uses its
    built-in default instead of /usr/share/OVMF.fd which does not exist
    on RHEL9
  - Fix pcie_root_port=0 in CC GPU configs.
    Resolves: KATA-5471


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.125.1.el9_6]
changelog:
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179751] {CVE-2026-43414}
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (Arif Badar) [RHEL-179314] {CVE-2026-46090}
  - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174238] {CVE-2026-43198}
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI KWF BOT) [RHEL-172618] {CVE-2026-43027}
  - drm/mgag200: fix mgag200_bmc_stop_scanout() (CKI KWF BOT) [RHEL-150177]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.126.1.el9_6]
changelog:
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179959] {CVE-2026-46189}
  - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182539]
  - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182539]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182539]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182539]
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180052] {CVE-2026-46152}
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173933] {CVE-2026-43279}
  - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI KWF BOT) [RHEL-180097] {CVE-2026-46135}
  - gfs2: Fix use-after-free in iomap inline data write path (CKI KWF BOT) [RHEL-179591] {CVE-2026-45984}
  - gfs2: Add metapath_dibh helper (CKI KWF BOT) [RHEL-179591] {CVE-2026-45984}
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166890] {CVE-2025-68183}
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Arif Badar) [RHEL-165061] {CVE-2026-31408}
  - mm, xfs: suppress __GFP_NOFAIL|PF_MEMALLOC warning for XFS buffer allocation (Nico Pache) [RHEL-164774]
  - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (CKI KWF BOT) [RHEL-164774]
  - mm/page_alloc: simplify __alloc_pages_slowpath() flow (CKI KWF BOT) [RHEL-164774]
  - mm/page_alloc: refactor the initial compaction handling (CKI KWF BOT) [RHEL-164774]
  - mm/page_alloc: ignore the exact initial compaction result (CKI KWF BOT) [RHEL-164774]
  - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (CKI KWF BOT) [RHEL-164774]
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race (CKI KWF BOT) [RHEL-164774]
  - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (CKI KWF BOT) [RHEL-164774]
  - mm: document __GFP_NOFAIL must be blockable (CKI KWF BOT) [RHEL-164774]


