| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: kernel-debug-modules-extra | Distribution: AlmaLinux |
| Version: 5.14.0 | Vendor: AlmaLinux |
| Release: 687.19.1.el9_8 | Build date: Mon Jun 29 14:02:15 2026 |
| Group: Unspecified | Build host: ppc64le-builder02.almalinux.org |
| Size: 424823 | Source RPM: kernel-5.14.0-687.19.1.el9_8.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://www.kernel.org/ | |
| Summary: Extra kernel modules to match the kernel | |
This package provides less commonly used kernel modules for the kernel package.
((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-Clear AND GFDL-1.1-no-invariants-or-later AND GPL-1.0-or-later AND (GPL-1.0-or-later OR BSD-3-Clause) AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only OR Apache-2.0) AND (GPL-2.0-only OR BSD-2-Clause) AND (GPL-2.0-only OR BSD-3-Clause) AND (GPL-2.0-only OR CDDL-1.0) AND (GPL-2.0-only OR GFDL-1.1-no-invariants-or-later) AND (GPL-2.0-only OR GFDL-1.2-no-invariants-only) AND (GPL-2.0-only WITH Linux-syscall-note) AND GPL-2.0-or-later AND (GPL-2.0-or-later OR BSD-2-Clause) AND (GPL-2.0-or-later OR BSD-3-Clause) AND (GPL-2.0-or-later OR CC-BY-4.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND ISC AND LGPL-2.0-or-later AND (LGPL-2.0-or-later OR BSD-2-Clause) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND LGPL-2.1-only AND (LGPL-2.1-only OR BSD-2-Clause) AND (LGPL-2.1-only WITH Linux-syscall-note) AND LGPL-2.1-or-later AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND (Linux-OpenIB OR GPL-2.0-only) AND (Linux-OpenIB OR GPL-2.0-only OR BSD-2-Clause) AND Linux-man-pages-copyleft AND MIT AND (MIT OR GPL-2.0-only) AND (MIT OR GPL-2.0-or-later) AND (MIT OR LGPL-2.1-only) AND (MPL-1.1 OR GPL-2.0-only) AND (X11 OR GPL-2.0-only) AND (X11 OR GPL-2.0-or-later) AND Zlib AND (copyleft-next-0.3.1 OR GPL-2.0-or-later)
* Mon Jun 29 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 5.14.0-687.19.1
- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:
* Thu Jun 25 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.19.1.el9_8]
- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]
* Tue Jun 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.18.1.el9_8]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}
* Tue Jun 23 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 5.14.0-687.17.1
- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)
* Mon Jun 22 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 5.14.0-687.17.1
- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:
* Thu Jun 18 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.17.1.el9_8]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}
* Tue Jun 16 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.16.1.el9_8]
- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}
* Thu Jun 11 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 5.14.0-687.15.1
- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:
* Wed Jun 10 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-687.15.1.el9_8]
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}
* Tue Jun 09 2026 Tanishi Srivastava <tsrivast@redhat.com> [5.14.0-687.14.1.el9_8]
- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]
/etc/modprobe.d/atm-blacklist.conf /etc/modprobe.d/l2tp_eth-blacklist.conf /etc/modprobe.d/l2tp_ip-blacklist.conf /etc/modprobe.d/l2tp_ip6-blacklist.conf /etc/modprobe.d/l2tp_netlink-blacklist.conf /etc/modprobe.d/l2tp_ppp-blacklist.conf /etc/modprobe.d/sctp-blacklist.conf /etc/modprobe.d/sctp_diag-blacklist.conf /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/extra /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/drivers/net/can/slcan/slcan.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/drivers/net/can/usb/ems_usb.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/drivers/net/can/vcan.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/drivers/net/slip/slip.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/drivers/pci/pcie/aer_inject.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/fs/fuse/cuse.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/lib/test_lockup.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/atm/br2684.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/atm/clip.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/atm/lec.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/atm/pppoatm.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/ipv4/fou.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/ipv4/tcp_bic.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/ipv4/tcp_htcp.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/ipv4/tcp_illinois.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/ipv4/tcp_westwood.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/ipv6/fou6.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/l2tp/l2tp_core.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/l2tp/l2tp_debugfs.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/l2tp/l2tp_eth.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/l2tp/l2tp_ip.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/l2tp/l2tp_ip6.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/l2tp/l2tp_netlink.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/l2tp/l2tp_ppp.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/sctp/sctp.ko.xz /lib/modules/5.14.0-687.19.1.el9_8.ppc64le+debug/kernel/net/sctp/sctp_diag.ko.xz
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Jun 30 05:21:57 2026