diff --git a/.gitignore b/.gitignore index 3d289ff..743e1e1 100644 --- a/.gitignore +++ b/.gitignore @@ -1,5 +1,5 @@ -SOURCES/kernel-abi-stablelists-4.18.0-294.tar.bz2 -SOURCES/kernel-kabi-dw-4.18.0-294.tar.bz2 -SOURCES/linux-4.18.0-294.el8.tar.xz +SOURCES/kernel-abi-stablelists-4.18.0-301.tar.bz2 +SOURCES/kernel-kabi-dw-4.18.0-301.tar.bz2 +SOURCES/linux-4.18.0-301.1.el8.tar.xz SOURCES/rheldup3.x509 SOURCES/rhelkpatch1.x509 diff --git a/.kernel.metadata b/.kernel.metadata index 0a076b1..1eeb528 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,5 +1,5 @@ -a2a159b04e9100de59d60b0144bb7e53c374dff2 SOURCES/kernel-abi-stablelists-4.18.0-294.tar.bz2 -86801aaa02b60870f2f935537b292c70e78d2e54 SOURCES/kernel-kabi-dw-4.18.0-294.tar.bz2 -1ac6984d58c2a358216f7e8682f6fd0561e224b3 SOURCES/linux-4.18.0-294.el8.tar.xz +e3d72dde4d6053052269c5b00689c20dbb3dea65 SOURCES/kernel-abi-stablelists-4.18.0-301.tar.bz2 +109f15ce9699bfa93bd9dc4f8e88013ce341e0e7 SOURCES/kernel-kabi-dw-4.18.0-301.tar.bz2 +6638ce9a7952baff7e62ab27c20087a7b402a44e SOURCES/linux-4.18.0-301.1.el8.tar.xz 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509 diff --git a/SOURCES/Module.kabi_aarch64 b/SOURCES/Module.kabi_aarch64 index a3ad374..11b439e 100644 --- a/SOURCES/Module.kabi_aarch64 +++ b/SOURCES/Module.kabi_aarch64 @@ -65,6 +65,7 @@ 0x7da02233 __put_cred vmlinux EXPORT_SYMBOL 0xd031343e __put_page vmlinux EXPORT_SYMBOL 0xe8f74e3b __put_task_struct vmlinux EXPORT_SYMBOL_GPL +0x5a45d9ae __register_chrdev vmlinux EXPORT_SYMBOL 0xe45c1b14 __release_region vmlinux EXPORT_SYMBOL 0x5eba9410 __request_region vmlinux EXPORT_SYMBOL 0x5c282196 __scsi_execute vmlinux EXPORT_SYMBOL @@ -74,6 +75,7 @@ 0xa6033f23 __task_pid_nr_ns vmlinux EXPORT_SYMBOL 0x0faef0ed __tasklet_schedule vmlinux EXPORT_SYMBOL 0x9e7d6bd0 __udelay vmlinux EXPORT_SYMBOL +0x6bc3fbc0 __unregister_chrdev vmlinux EXPORT_SYMBOL 0xf1969a8e __usecs_to_jiffies vmlinux EXPORT_SYMBOL 0xad2831af __vmalloc vmlinux EXPORT_SYMBOL 0x3eeb2322 __wake_up vmlinux EXPORT_SYMBOL @@ -178,6 +180,7 @@ 0x68f927fb cancel_delayed_work_sync vmlinux EXPORT_SYMBOL 0x81b1b255 cancel_work_sync vmlinux EXPORT_SYMBOL_GPL 0xc6cbbc89 capable vmlinux EXPORT_SYMBOL +0x8a6b7156 class_destroy vmlinux EXPORT_SYMBOL_GPL 0xe28a9c32 class_unregister vmlinux EXPORT_SYMBOL_GPL 0xb23c934e commit_creds vmlinux EXPORT_SYMBOL 0x29361773 complete vmlinux EXPORT_SYMBOL @@ -215,6 +218,8 @@ 0xc55637a6 dev_set_mtu vmlinux EXPORT_SYMBOL 0xc3b519d1 dev_set_promiscuity vmlinux EXPORT_SYMBOL 0xaef62a99 device_add_disk vmlinux EXPORT_SYMBOL +0x1744744a device_create vmlinux EXPORT_SYMBOL_GPL +0x8ea07c28 device_destroy vmlinux EXPORT_SYMBOL_GPL 0x926be68c dma_get_required_mask vmlinux EXPORT_SYMBOL_GPL 0x1c5a0e6e dma_set_coherent_mask vmlinux EXPORT_SYMBOL 0x4e0bc306 dma_set_mask vmlinux EXPORT_SYMBOL @@ -229,6 +234,7 @@ 0x4efeaecf downgrade_write vmlinux EXPORT_SYMBOL 0xa4fd336d dst_release vmlinux EXPORT_SYMBOL 0x6b2dc060 dump_stack vmlinux EXPORT_SYMBOL +0xd0c05159 emergency_restart vmlinux EXPORT_SYMBOL_GPL 0x612bfd89 errno_to_blk_status vmlinux EXPORT_SYMBOL_GPL 0x4c16334a eth_type_trans vmlinux EXPORT_SYMBOL 0x092f9801 ether_setup vmlinux EXPORT_SYMBOL @@ -320,6 +326,7 @@ 0x0973d7fb kobject_add vmlinux EXPORT_SYMBOL 0xc985b4ca kobject_create_and_add vmlinux EXPORT_SYMBOL_GPL 0xe9ec6844 kobject_del vmlinux EXPORT_SYMBOL +0xa9c2cec5 kobject_get vmlinux EXPORT_SYMBOL 0x217548d3 kobject_init vmlinux EXPORT_SYMBOL 0x71c0e774 kobject_init_and_add vmlinux EXPORT_SYMBOL_GPL 0x2cec6038 kobject_put vmlinux EXPORT_SYMBOL @@ -382,6 +389,8 @@ 0xf812cff6 memscan vmlinux EXPORT_SYMBOL 0xdcb764ad memset vmlinux EXPORT_SYMBOL 0x9688de8b memstart_addr vmlinux EXPORT_SYMBOL +0x29c21688 misc_deregister vmlinux EXPORT_SYMBOL +0xeac7b62d misc_register vmlinux EXPORT_SYMBOL 0x29367907 mmput vmlinux EXPORT_SYMBOL_GPL 0x1ccf7c3c mmu_notifier_register vmlinux EXPORT_SYMBOL_GPL 0x725826d8 mmu_notifier_unregister vmlinux EXPORT_SYMBOL_GPL diff --git a/SOURCES/Module.kabi_ppc64le b/SOURCES/Module.kabi_ppc64le index 11f0299..2124c76 100644 --- a/SOURCES/Module.kabi_ppc64le +++ b/SOURCES/Module.kabi_ppc64le @@ -49,6 +49,7 @@ 0xeb94d60b __put_cred vmlinux EXPORT_SYMBOL 0xccbfcd34 __put_page vmlinux EXPORT_SYMBOL 0x6301916d __put_task_struct vmlinux EXPORT_SYMBOL_GPL +0xdee37668 __register_chrdev vmlinux EXPORT_SYMBOL 0xe45c1b14 __release_region vmlinux EXPORT_SYMBOL 0x5eba9410 __request_region vmlinux EXPORT_SYMBOL 0xa2beceb1 __scsi_execute vmlinux EXPORT_SYMBOL @@ -57,6 +58,7 @@ 0xdb7305a1 __stack_chk_fail vmlinux EXPORT_SYMBOL 0x56c083d3 __task_pid_nr_ns vmlinux EXPORT_SYMBOL 0x0faef0ed __tasklet_schedule vmlinux EXPORT_SYMBOL +0x6bc3fbc0 __unregister_chrdev vmlinux EXPORT_SYMBOL 0xf1969a8e __usecs_to_jiffies vmlinux EXPORT_SYMBOL 0x8e879bb7 __vmalloc vmlinux EXPORT_SYMBOL 0xfdd6bbad __wake_up vmlinux EXPORT_SYMBOL @@ -168,6 +170,7 @@ 0x68f927fb cancel_delayed_work_sync vmlinux EXPORT_SYMBOL 0x81b1b255 cancel_work_sync vmlinux EXPORT_SYMBOL_GPL 0xc6cbbc89 capable vmlinux EXPORT_SYMBOL +0xcedfad7e class_destroy vmlinux EXPORT_SYMBOL_GPL 0x11c02784 class_unregister vmlinux EXPORT_SYMBOL_GPL 0xf0d61d9c commit_creds vmlinux EXPORT_SYMBOL 0x86b18094 complete vmlinux EXPORT_SYMBOL @@ -205,6 +208,8 @@ 0xed26c2e8 dev_set_mtu vmlinux EXPORT_SYMBOL 0x5a7963bd dev_set_promiscuity vmlinux EXPORT_SYMBOL 0x697cc68b device_add_disk vmlinux EXPORT_SYMBOL +0x97c5ca02 device_create vmlinux EXPORT_SYMBOL_GPL +0xaef0f53d device_destroy vmlinux EXPORT_SYMBOL_GPL 0x495cd368 dma_get_required_mask vmlinux EXPORT_SYMBOL_GPL 0x72a05d02 dma_set_coherent_mask vmlinux EXPORT_SYMBOL 0x89d4d619 dma_set_mask vmlinux EXPORT_SYMBOL @@ -219,6 +224,7 @@ 0x29397620 downgrade_write vmlinux EXPORT_SYMBOL 0xad580bc5 dst_release vmlinux EXPORT_SYMBOL 0x6b2dc060 dump_stack vmlinux EXPORT_SYMBOL +0xd0c05159 emergency_restart vmlinux EXPORT_SYMBOL_GPL 0x612bfd89 errno_to_blk_status vmlinux EXPORT_SYMBOL_GPL 0x3a968436 eth_type_trans vmlinux EXPORT_SYMBOL 0x3c8d07f4 ether_setup vmlinux EXPORT_SYMBOL @@ -310,6 +316,7 @@ 0x40e308cc kobject_add vmlinux EXPORT_SYMBOL 0x71f56a28 kobject_create_and_add vmlinux EXPORT_SYMBOL_GPL 0xd896d94b kobject_del vmlinux EXPORT_SYMBOL +0x787d886d kobject_get vmlinux EXPORT_SYMBOL 0x2f602452 kobject_init vmlinux EXPORT_SYMBOL 0x9c38868d kobject_init_and_add vmlinux EXPORT_SYMBOL_GPL 0x679ca598 kobject_put vmlinux EXPORT_SYMBOL @@ -372,6 +379,8 @@ 0xf812cff6 memscan vmlinux EXPORT_SYMBOL 0xdcb764ad memset vmlinux EXPORT_SYMBOL 0xae87cad0 memstart_addr vmlinux EXPORT_SYMBOL_GPL +0x8e3ca75a misc_deregister vmlinux EXPORT_SYMBOL +0x5f96c76a misc_register vmlinux EXPORT_SYMBOL 0x74267b6a mmput vmlinux EXPORT_SYMBOL_GPL 0xe7bb9278 mmu_notifier_register vmlinux EXPORT_SYMBOL_GPL 0x108aece2 mmu_notifier_unregister vmlinux EXPORT_SYMBOL_GPL diff --git a/SOURCES/Module.kabi_s390x b/SOURCES/Module.kabi_s390x index feaac3d..7230a4b 100644 --- a/SOURCES/Module.kabi_s390x +++ b/SOURCES/Module.kabi_s390x @@ -47,6 +47,7 @@ 0x25207859 __put_cred vmlinux EXPORT_SYMBOL 0xbd1b113a __put_page vmlinux EXPORT_SYMBOL 0x8a2e5412 __put_task_struct vmlinux EXPORT_SYMBOL_GPL +0xcdf1ba58 __register_chrdev vmlinux EXPORT_SYMBOL 0xe45c1b14 __release_region vmlinux EXPORT_SYMBOL 0x5eba9410 __request_region vmlinux EXPORT_SYMBOL 0x3d1ba4bd __scsi_execute vmlinux EXPORT_SYMBOL @@ -55,6 +56,7 @@ 0xfcbb0506 __task_pid_nr_ns vmlinux EXPORT_SYMBOL 0x0faef0ed __tasklet_schedule vmlinux EXPORT_SYMBOL 0x3fb0b9e3 __udelay vmlinux EXPORT_SYMBOL +0x6bc3fbc0 __unregister_chrdev vmlinux EXPORT_SYMBOL 0xf1969a8e __usecs_to_jiffies vmlinux EXPORT_SYMBOL 0x8e879bb7 __vmalloc vmlinux EXPORT_SYMBOL 0x1bf301c3 __wake_up vmlinux EXPORT_SYMBOL @@ -144,6 +146,7 @@ 0x68f927fb cancel_delayed_work_sync vmlinux EXPORT_SYMBOL 0x81b1b255 cancel_work_sync vmlinux EXPORT_SYMBOL_GPL 0xc6cbbc89 capable vmlinux EXPORT_SYMBOL +0x2d574c16 class_destroy vmlinux EXPORT_SYMBOL_GPL 0xd0b990c6 class_unregister vmlinux EXPORT_SYMBOL_GPL 0x0f366a31 commit_creds vmlinux EXPORT_SYMBOL 0x6642d348 complete vmlinux EXPORT_SYMBOL @@ -178,6 +181,8 @@ 0x80b0cdfb dev_set_mtu vmlinux EXPORT_SYMBOL 0x7f1789d8 dev_set_promiscuity vmlinux EXPORT_SYMBOL 0xafc69e48 device_add_disk vmlinux EXPORT_SYMBOL +0xe8ea8981 device_create vmlinux EXPORT_SYMBOL_GPL +0x50ccb4d8 device_destroy vmlinux EXPORT_SYMBOL_GPL 0x81fe92cc dma_get_required_mask vmlinux EXPORT_SYMBOL_GPL 0xf7bbf143 dma_set_coherent_mask vmlinux EXPORT_SYMBOL 0x783b83d3 dma_set_mask vmlinux EXPORT_SYMBOL @@ -192,6 +197,7 @@ 0x909b6ce3 downgrade_write vmlinux EXPORT_SYMBOL 0xa3e80006 dst_release vmlinux EXPORT_SYMBOL 0x6b2dc060 dump_stack vmlinux EXPORT_SYMBOL +0xd0c05159 emergency_restart vmlinux EXPORT_SYMBOL_GPL 0x612bfd89 errno_to_blk_status vmlinux EXPORT_SYMBOL_GPL 0x6229afcd eth_type_trans vmlinux EXPORT_SYMBOL 0x40d650b4 ether_setup vmlinux EXPORT_SYMBOL @@ -274,6 +280,7 @@ 0x1eff77ac kobject_add vmlinux EXPORT_SYMBOL 0x8d10ed44 kobject_create_and_add vmlinux EXPORT_SYMBOL_GPL 0x56d88374 kobject_del vmlinux EXPORT_SYMBOL +0x742ce0ea kobject_get vmlinux EXPORT_SYMBOL 0x28f397f9 kobject_init vmlinux EXPORT_SYMBOL 0x16f03e4d kobject_init_and_add vmlinux EXPORT_SYMBOL_GPL 0xa11e7937 kobject_put vmlinux EXPORT_SYMBOL @@ -335,6 +342,8 @@ 0x8a99a016 mempool_free_slab vmlinux EXPORT_SYMBOL 0x9a906daf memscan vmlinux EXPORT_SYMBOL 0xde0bdcff memset vmlinux EXPORT_SYMBOL +0xc7582579 misc_deregister vmlinux EXPORT_SYMBOL +0x5fe7b349 misc_register vmlinux EXPORT_SYMBOL 0xe0612783 mmput vmlinux EXPORT_SYMBOL_GPL 0xebca8b54 mod_delayed_work_on vmlinux EXPORT_SYMBOL_GPL 0x28985b9f mod_timer vmlinux EXPORT_SYMBOL diff --git a/SOURCES/Module.kabi_x86_64 b/SOURCES/Module.kabi_x86_64 index a5ba3d5..1481161 100644 --- a/SOURCES/Module.kabi_x86_64 +++ b/SOURCES/Module.kabi_x86_64 @@ -56,6 +56,7 @@ 0x5a4896a8 __put_user_2 vmlinux EXPORT_SYMBOL 0xb2fd5ceb __put_user_4 vmlinux EXPORT_SYMBOL 0xb8e7ce2c __put_user_8 vmlinux EXPORT_SYMBOL +0x6ad5f0ce __register_chrdev vmlinux EXPORT_SYMBOL 0x9a8a0ca3 __register_nmi_handler vmlinux EXPORT_SYMBOL 0xe45c1b14 __release_region vmlinux EXPORT_SYMBOL 0x5eba9410 __request_region vmlinux EXPORT_SYMBOL @@ -66,6 +67,7 @@ 0x972a1e61 __task_pid_nr_ns vmlinux EXPORT_SYMBOL 0x0faef0ed __tasklet_schedule vmlinux EXPORT_SYMBOL 0x9e7d6bd0 __udelay vmlinux EXPORT_SYMBOL +0x6bc3fbc0 __unregister_chrdev vmlinux EXPORT_SYMBOL 0xf1969a8e __usecs_to_jiffies vmlinux EXPORT_SYMBOL 0x50a25b70 __uv_cpu_info vmlinux EXPORT_SYMBOL_GPL 0x8ad5ceb1 __uv_hub_info_list vmlinux EXPORT_SYMBOL_GPL @@ -210,6 +212,7 @@ 0x68f927fb cancel_delayed_work_sync vmlinux EXPORT_SYMBOL 0x81b1b255 cancel_work_sync vmlinux EXPORT_SYMBOL_GPL 0xc6cbbc89 capable vmlinux EXPORT_SYMBOL +0x21e01071 class_destroy vmlinux EXPORT_SYMBOL_GPL 0x02edfc37 class_unregister vmlinux EXPORT_SYMBOL_GPL 0x7da99cdd clear_user vmlinux EXPORT_SYMBOL 0x436d11d6 commit_creds vmlinux EXPORT_SYMBOL @@ -256,6 +259,8 @@ 0x7a8e31b6 dev_set_mtu vmlinux EXPORT_SYMBOL 0x22975705 dev_set_promiscuity vmlinux EXPORT_SYMBOL 0x87c3a329 device_add_disk vmlinux EXPORT_SYMBOL +0xfae8f523 device_create vmlinux EXPORT_SYMBOL_GPL +0x7b4244f7 device_destroy vmlinux EXPORT_SYMBOL_GPL 0xf4db2b68 dma_get_required_mask vmlinux EXPORT_SYMBOL_GPL 0x4ce6ccb6 dma_ops vmlinux EXPORT_SYMBOL 0x0c0b6182 dma_set_coherent_mask vmlinux EXPORT_SYMBOL @@ -271,6 +276,7 @@ 0x2e3ee29b downgrade_write vmlinux EXPORT_SYMBOL 0x0cc084f7 dst_release vmlinux EXPORT_SYMBOL 0x6b2dc060 dump_stack vmlinux EXPORT_SYMBOL +0xd0c05159 emergency_restart vmlinux EXPORT_SYMBOL_GPL 0x612bfd89 errno_to_blk_status vmlinux EXPORT_SYMBOL_GPL 0x1030cd3d eth_type_trans vmlinux EXPORT_SYMBOL 0xb05be19c ether_setup vmlinux EXPORT_SYMBOL @@ -370,6 +376,7 @@ 0x0973d7fb kobject_add vmlinux EXPORT_SYMBOL 0xc985b4ca kobject_create_and_add vmlinux EXPORT_SYMBOL_GPL 0xe9ec6844 kobject_del vmlinux EXPORT_SYMBOL +0xa9c2cec5 kobject_get vmlinux EXPORT_SYMBOL 0x217548d3 kobject_init vmlinux EXPORT_SYMBOL 0x71c0e774 kobject_init_and_add vmlinux EXPORT_SYMBOL_GPL 0x2cec6038 kobject_put vmlinux EXPORT_SYMBOL @@ -431,6 +438,8 @@ 0x8a99a016 mempool_free_slab vmlinux EXPORT_SYMBOL 0xf812cff6 memscan vmlinux EXPORT_SYMBOL 0xfb578fc5 memset vmlinux EXPORT_SYMBOL +0x113b918c misc_deregister vmlinux EXPORT_SYMBOL +0x692fcb28 misc_register vmlinux EXPORT_SYMBOL 0x2aa7dddc mmput vmlinux EXPORT_SYMBOL_GPL 0x87b0fc1b mmu_notifier_register vmlinux EXPORT_SYMBOL_GPL 0x9f147e1c mmu_notifier_unregister vmlinux EXPORT_SYMBOL_GPL diff --git a/SOURCES/centos-ca-secureboot.der b/SOURCES/centos-ca-secureboot.der deleted file mode 100644 index 44a2563..0000000 Binary files a/SOURCES/centos-ca-secureboot.der and /dev/null differ diff --git a/SOURCES/centos.pem b/SOURCES/centos.pem deleted file mode 100644 index 82ad817..0000000 --- a/SOURCES/centos.pem +++ /dev/null @@ -1,42 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDgTCCAmmgAwIBAgIJALYWFXFy+zGAMA0GCSqGSIb3DQEBCwUAMEwxJjAkBgNV -BAMMHUNlbnRPUyBTZWN1cmUgQm9vdCAoQ0Ega2V5IDEpMSIwIAYJKoZIhvcNAQkB -FhNzZWN1cml0eUBjZW50b3Mub3JnMB4XDTE5MDYwMzE0MjA0MFoXDTM4MDEwMTE0 -MjA0MFowVTEvMC0GA1UEAwwmQ2VudE9TIExpbnV4IERyaXZlciB1cGRhdGUgc2ln -bmluZyBrZXkxIjAgBgkqhkiG9w0BCQEWE3NlY3VyaXR5QGNlbnRvcy5vcmcwggEi -MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5ECuosQ4HKRRf+Kxfm+BcICBK -PGqB+E/qalqQ3CCM3LWezq0ns/GZTD0CtSAzmOObqJb3gJ9S5gcbaMVBc3JxLlQ+ -RwVy0oNy91uy9TKhYQ3lpHDyujxiFmXPSJLMKOYbOBNObJ7qF6+ptnmDWMu7GWDc -4UGdBdU/evt92LIxsi9ZQCEoZIqdyKBE/Y3V9gBZIZa/4oXMHfW9dWxhy9UszmR9 -hT7ZdgLFpWMFmJW+SS5QEWtp5CpRlcui4QJZl42bMp5JOrVWc+BlKPIsLdY8TqLp -9FdhQ5Ih4auT7zn2V89YgYpq6VMZnPsn/v5piB6i6RK8Falr6SP5SV0cwV/jAgMB -AAGjXTBbMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgeAMB0GA1UdDgQWBBQpvUwN -BtLpkRBEtdyXMwkTm1HW1TAfBgNVHSMEGDAWgBRU7IGFiT7pGtsI90SIVH6OP3Q6 -8zANBgkqhkiG9w0BAQsFAAOCAQEAK+f4c4aP9TQDiQM4TDyw8iDapr7eBc+Yr0M5 -ELkWEQu55/OwLQrgCA5bdD86diaAXQAlUOXCtFRrbUQHQACEL77/32YdooHfVZZ7 -04CeE+JWxF/cQ3M5hhJnkyxaqFKC+B+bn7Z6eloMnYUPsXwfQEOuyxKaKergAJdq -KnC0pEG3NGgwlwvnD0dwUqbbEUUqL3UQh96hCYDidhCUmuap1E2OGoxGex3ekszf -ErCgwVYb46cv91ba2KqXVWl1FoO3c5MyZcxL46ihQgiY0BI975+HDFjpUZ69n+Um -OhSscRUiKeEQKMVtHzyQUp5t+HCeaZBRPy3rFoIjTEqijKZ6tQ== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIDejCCAmKgAwIBAgIJALYWFXFy+zF/MA0GCSqGSIb3DQEBCwUAMEwxJjAkBgNV -BAMMHUNlbnRPUyBTZWN1cmUgQm9vdCAoQ0Ega2V5IDEpMSIwIAYJKoZIhvcNAQkB -FhNzZWN1cml0eUBjZW50b3Mub3JnMB4XDTE5MDYwMzE0MjAwMloXDTM4MDEwMTE0 -MjAwMlowTjEoMCYGA1UEAwwfQ2VudE9TIExpbnV4IGtwYXRjaCBzaWduaW5nIGtl -eTEiMCAGCSqGSIb3DQEJARYTc2VjdXJpdHlAY2VudG9zLm9yZzCCASIwDQYJKoZI -hvcNAQEBBQADggEPADCCAQoCggEBAMG+5OclqB0NE5azrGkSitqUFcZjpRk/rS2P -CetB6jwxOn06TrLGzqnhcE9VBKyEs7CXBLy6lfnORcYOybcR2XvrgqGa1txOZggl -hc8zCj9X7ZCMK2UsWglxQCOtbo0m/vdor/VO3SFbrf/W9+PXhvNtcxMP9yjydbP+ -lS1St8uQv952hu7C1TevyOQN3jpvWRD7DSJIU/2uRFcdIo2QCGokuB/xESXeuGJ2 -F2P9w0h74V18AlVTxtGp/RSJqZaQ2Gi5h4Oa7UsRmhmCoLdmdBe7xnYJrJ4GhxKQ -yG0kU1ikEhZW3YjoVPgBJzTsIhCAzFrOUq0d67a1wTVMiyL60fUCAwEAAaNdMFsw -DAYDVR0TAQH/BAIwADALBgNVHQ8EBAMCB4AwHQYDVR0OBBYEFLSfCGIFkJ3E2iz6 -mTdvsZHS8J54MB8GA1UdIwQYMBaAFFTsgYWJPuka2wj3RIhUfo4/dDrzMA0GCSqG -SIb3DQEBCwUAA4IBAQBcDnjWh8Mx6yaS/OvBOYZprYy5Su0tn+YHiN0czpjVw+zl -NUt2YmRSA/g6xks04CYx+UAL/xnvRcxXd17Ni7eWiROxvgQvBo5nScVkFPq2IIP5 -8aj7LoHR1MUeXfiNqf1JoSlgpRV47wv/+jZD0hmbt1rC2NJp0ZU8OHmt2GWk0jmM -MK72D/pyCUfHetBzPpU9M0cNiukjMUdIL+U7+CXDgKsfdFHcQ76ebWyka7vRSXTs -lBMa2g20Atwz2Hj7tEEAZ74ioQ9029RAlUSNipACe31YdT4/BBWIqHPpeDFkp8W0 -9v4jeTX/2kMBXkjzMfKjhpooa+bFFFLogLeX3P4W ------END CERTIFICATE----- diff --git a/SOURCES/centossecureboot001.der b/SOURCES/centossecureboot001.der deleted file mode 100644 index e8216b1..0000000 Binary files a/SOURCES/centossecureboot001.der and /dev/null differ diff --git a/SOURCES/centossecureboot201.der b/SOURCES/centossecureboot201.der deleted file mode 100644 index ca3c134..0000000 Binary files a/SOURCES/centossecureboot201.der and /dev/null differ diff --git a/SOURCES/centossecurebootca2.der b/SOURCES/centossecurebootca2.der deleted file mode 100644 index 42bdfcf..0000000 Binary files a/SOURCES/centossecurebootca2.der and /dev/null differ diff --git a/SOURCES/kernel-aarch64-debug.config b/SOURCES/kernel-aarch64-debug.config index 1608f1d..72d265b 100644 --- a/SOURCES/kernel-aarch64-debug.config +++ b/SOURCES/kernel-aarch64-debug.config @@ -2856,11 +2856,6 @@ CONFIG_CRYPTO_DEV_CCP_DD=m CONFIG_CRYPTO_DEV_CCP_DEBUGFS=y CONFIG_CRYPTO_DEV_CHELSIO=m CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m -CONFIG_CRYPTO_DEV_QAT_C3XXX=m -CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m -CONFIG_CRYPTO_DEV_QAT_C62X=m -CONFIG_CRYPTO_DEV_QAT_C62XVF=m -CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m CONFIG_CRYPTO_DEV_SP_CCP=y CONFIG_CRYPTO_DEV_SP_PSP=y CONFIG_CRYPTO_DRBG_CTR=y diff --git a/SOURCES/kernel-aarch64.config b/SOURCES/kernel-aarch64.config index 89ff294..9d228dd 100644 --- a/SOURCES/kernel-aarch64.config +++ b/SOURCES/kernel-aarch64.config @@ -2919,11 +2919,6 @@ CONFIG_CRYPTO_DEV_CCP_CRYPTO=m CONFIG_CRYPTO_DEV_CCP_DD=m CONFIG_CRYPTO_DEV_CHELSIO=m CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m -CONFIG_CRYPTO_DEV_QAT_C3XXX=m -CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m -CONFIG_CRYPTO_DEV_QAT_C62X=m -CONFIG_CRYPTO_DEV_QAT_C62XVF=m -CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m CONFIG_CRYPTO_DEV_SP_CCP=y CONFIG_CRYPTO_DEV_SP_PSP=y CONFIG_CRYPTO_DRBG_CTR=y diff --git a/SOURCES/kernel-ppc64le-debug.config b/SOURCES/kernel-ppc64le-debug.config index 6d2d308..731cc76 100644 --- a/SOURCES/kernel-ppc64le-debug.config +++ b/SOURCES/kernel-ppc64le-debug.config @@ -2533,11 +2533,6 @@ CONFIG_CRYPTO_DEV_NX=y CONFIG_CRYPTO_DEV_NX_COMPRESS=y CONFIG_CRYPTO_DEV_NX_COMPRESS_POWERNV=y CONFIG_CRYPTO_DEV_NX_COMPRESS_PSERIES=y -CONFIG_CRYPTO_DEV_QAT_C3XXX=m -CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m -CONFIG_CRYPTO_DEV_QAT_C62X=m -CONFIG_CRYPTO_DEV_QAT_C62XVF=m -CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m CONFIG_CRYPTO_DEV_SP_CCP=y CONFIG_CRYPTO_DEV_SP_PSP=y CONFIG_CRYPTO_DEV_VMX=y diff --git a/SOURCES/kernel-ppc64le.config b/SOURCES/kernel-ppc64le.config index a850c1c..2f4b90b 100644 --- a/SOURCES/kernel-ppc64le.config +++ b/SOURCES/kernel-ppc64le.config @@ -2594,11 +2594,6 @@ CONFIG_CRYPTO_DEV_NX=y CONFIG_CRYPTO_DEV_NX_COMPRESS=y CONFIG_CRYPTO_DEV_NX_COMPRESS_POWERNV=y CONFIG_CRYPTO_DEV_NX_COMPRESS_PSERIES=y -CONFIG_CRYPTO_DEV_QAT_C3XXX=m -CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m -CONFIG_CRYPTO_DEV_QAT_C62X=m -CONFIG_CRYPTO_DEV_QAT_C62XVF=m -CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m CONFIG_CRYPTO_DEV_SP_CCP=y CONFIG_CRYPTO_DEV_SP_PSP=y CONFIG_CRYPTO_DEV_VMX=y diff --git a/SOURCES/kernel-s390x-debug.config b/SOURCES/kernel-s390x-debug.config index ec04fb3..e09ebe0 100644 --- a/SOURCES/kernel-s390x-debug.config +++ b/SOURCES/kernel-s390x-debug.config @@ -2657,11 +2657,6 @@ CONFIG_CRYPTO_DEV_CCP_CRYPTO=m CONFIG_CRYPTO_DEV_CCP_DEBUGFS=y CONFIG_CRYPTO_DEV_CHELSIO=m CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m -CONFIG_CRYPTO_DEV_QAT_C3XXX=m -CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m -CONFIG_CRYPTO_DEV_QAT_C62X=m -CONFIG_CRYPTO_DEV_QAT_C62XVF=m -CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m CONFIG_CRYPTO_DEV_SP_CCP=y CONFIG_CRYPTO_DEV_SP_PSP=y CONFIG_CRYPTO_DRBG_CTR=y diff --git a/SOURCES/kernel-s390x-zfcpdump.config b/SOURCES/kernel-s390x-zfcpdump.config index fb4df91..cdbc7a5 100644 --- a/SOURCES/kernel-s390x-zfcpdump.config +++ b/SOURCES/kernel-s390x-zfcpdump.config @@ -2864,11 +2864,6 @@ CONFIG_CRYPTO_DES_S390=y CONFIG_CRYPTO_DEV_CCP_CRYPTO=m CONFIG_CRYPTO_DEV_CHELSIO=m CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m -CONFIG_CRYPTO_DEV_QAT_C3XXX=m -CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m -CONFIG_CRYPTO_DEV_QAT_C62X=m -CONFIG_CRYPTO_DEV_QAT_C62XVF=m -CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m CONFIG_CRYPTO_DEV_SP_CCP=y CONFIG_CRYPTO_DEV_SP_PSP=y CONFIG_CRYPTO_DRBG_CTR=y diff --git a/SOURCES/kernel-s390x.config b/SOURCES/kernel-s390x.config index fe82598..5247f4e 100644 --- a/SOURCES/kernel-s390x.config +++ b/SOURCES/kernel-s390x.config @@ -2718,11 +2718,6 @@ CONFIG_CRYPTO_DES_S390=m CONFIG_CRYPTO_DEV_CCP_CRYPTO=m CONFIG_CRYPTO_DEV_CHELSIO=m CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m -CONFIG_CRYPTO_DEV_QAT_C3XXX=m -CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m -CONFIG_CRYPTO_DEV_QAT_C62X=m -CONFIG_CRYPTO_DEV_QAT_C62XVF=m -CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m CONFIG_CRYPTO_DEV_SP_CCP=y CONFIG_CRYPTO_DEV_SP_PSP=y CONFIG_CRYPTO_DRBG_CTR=y diff --git a/SOURCES/kernel-x86_64-debug.config b/SOURCES/kernel-x86_64-debug.config index 779a17f..ed64f0a 100644 --- a/SOURCES/kernel-x86_64-debug.config +++ b/SOURCES/kernel-x86_64-debug.config @@ -2598,6 +2598,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m CONFIG_CRYPTO_DEV_PADLOCK=m CONFIG_CRYPTO_DEV_PADLOCK_AES=m CONFIG_CRYPTO_DEV_PADLOCK_SHA=m +CONFIG_CRYPTO_DEV_QAT_4XXX=m CONFIG_CRYPTO_DEV_QAT_C3XXX=m CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m CONFIG_CRYPTO_DEV_QAT_C62X=m diff --git a/SOURCES/kernel-x86_64.config b/SOURCES/kernel-x86_64.config index 08d965b..2cce5dd 100644 --- a/SOURCES/kernel-x86_64.config +++ b/SOURCES/kernel-x86_64.config @@ -2659,6 +2659,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m CONFIG_CRYPTO_DEV_PADLOCK=m CONFIG_CRYPTO_DEV_PADLOCK_AES=m CONFIG_CRYPTO_DEV_PADLOCK_SHA=m +CONFIG_CRYPTO_DEV_QAT_4XXX=m CONFIG_CRYPTO_DEV_QAT_C3XXX=m CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m CONFIG_CRYPTO_DEV_QAT_C62X=m diff --git a/SOURCES/kvm_stat.logrotate b/SOURCES/kvm_stat.logrotate new file mode 100644 index 0000000..105e15e --- /dev/null +++ b/SOURCES/kvm_stat.logrotate @@ -0,0 +1,11 @@ +/var/log/kvm_stat.csv { + size 10M + missingok + compress + maxage 30 + rotate 5 + nodateext + postrotate + /usr/bin/systemctl try-restart kvm_stat.service + endscript +} diff --git a/SOURCES/x509.genkey b/SOURCES/x509.genkey index dbfe9a7..b1bbe38 100644 --- a/SOURCES/x509.genkey +++ b/SOURCES/x509.genkey @@ -5,9 +5,9 @@ prompt = no x509_extensions = myexts [ req_distinguished_name ] -O = CentOS -CN = CentOS kernel signing key -emailAddress = security@centos.org +O = Red Hat +CN = Red Hat Enterprise Linux kernel signing key +emailAddress = secalert@redhat.com [ myexts ] basicConstraints=critical,CA:FALSE diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 69ed046..343c23a 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -16,10 +16,10 @@ # For internal testing builds during development, it should be 0. %global released_kernel 0 -%global distro_build 294 +%global distro_build 301 # Sign the x86_64 kernel for secure boot authentication -%ifarch x86_64 aarch64 +%ifarch x86_64 aarch64 s390x ppc64le %global signkernel 1 %else %global signkernel 0 @@ -42,10 +42,10 @@ # define buildid .local %define rpmversion 4.18.0 -%define pkgrelease 294.el8 +%define pkgrelease 301.1.el8 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 294%{?dist} +%define specrelease 301.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -444,34 +444,44 @@ Source9: x509.genkey %if %{?released_kernel} -Source10: centossecurebootca2.der -Source11: centos-ca-secureboot.der -Source12: centossecureboot201.der -Source13: centossecureboot001.der +Source10: redhatsecurebootca5.cer +Source11: redhatsecurebootca3.cer +Source12: redhatsecureboot501.cer +Source13: redhatsecureboot301.cer +Source14: secureboot_s390.cer +Source15: secureboot_ppc.cer %define secureboot_ca_0 %{SOURCE11} %define secureboot_ca_1 %{SOURCE10} %ifarch x86_64 aarch64 %define secureboot_key_0 %{SOURCE13} -%define pesign_name_0 centossecureboot001 +%define pesign_name_0 redhatsecureboot301 %define secureboot_key_1 %{SOURCE12} -%define pesign_name_1 centossecureboot201 +%define pesign_name_1 redhatsecureboot501 +%endif +%ifarch s390x +%define secureboot_key_0 %{SOURCE14} +%define pesign_name_0 redhatsecureboot302 +%endif +%ifarch ppc64le +%define secureboot_key_0 %{SOURCE15} +%define pesign_name_0 redhatsecureboot303 %endif # released_kernel %else -Source11: centossecurebootca2.der -Source12: centos-ca-secureboot.der -Source13: centossecureboot201.der -Source14: centossecureboot001.der +Source11: redhatsecurebootca4.cer +Source12: redhatsecurebootca2.cer +Source13: redhatsecureboot401.cer +Source14: redhatsecureboot003.cer %define secureboot_ca_0 %{SOURCE12} %define secureboot_ca_1 %{SOURCE11} %define secureboot_key_0 %{SOURCE14} -%define pesign_name_0 centossecureboot001 +%define pesign_name_0 redhatsecureboot003 %define secureboot_key_1 %{SOURCE13} -%define pesign_name_1 centossecureboot201 +%define pesign_name_1 redhatsecureboot401 # released_kernel %endif @@ -530,8 +540,7 @@ Source400: mod-kvm.list # Sources for kernel-tools Source2000: cpupower.service Source2001: cpupower.config - -Source9000: centos.pem +Source2002: kvm_stat.logrotate ## Patches needed for building this package @@ -543,8 +552,8 @@ Patch999999: linux-kernel-test.patch BuildRoot: %{_tmppath}/%{name}-%{KVERREL}-root %description -This is the package which provides the Linux %{name} for CentOS. -It is based on upstream Linux at version %{version} and maintains kABI +This is the package which provides the Linux %{name} for Red Hat Enterprise +Linux. It is based on upstream Linux at version %{version} and maintains kABI compatibility of a set of approved symbols, however it is heavily modified with backports and fixes pulled from newer upstream Linux %{name} releases. This means this is not a %{version} kernel anymore: it includes several components which come @@ -552,7 +561,7 @@ from newer upstream linux versions, while maintaining a well tested and stable core. Some of the components/backports that may be pulled in are: changes like updates to the core kernel (eg.: scheduler, cgroups, memory management, security fixes and features), updates to block layer, supported filesystems, major driver -updates for supported hardware in CentOS, enhancements for +updates for supported hardware in Red Hat Enterprise Linux, enhancements for enterprise customers, etc. # @@ -793,14 +802,14 @@ kernel-gcov includes the gcov graph and source files for gcov coverage collectio %endif %package -n %{name}-abi-stablelists -Summary: The CentOS kernel ABI symbol stablelists +Summary: The Red Hat Enterprise Linux kernel ABI symbol stablelists Group: System Environment/Kernel AutoReqProv: no Obsoletes: %{name}-abi-whitelists < %{rpmversion}-%{pkg_release} Provides: %{name}-abi-whitelists %description -n %{name}-abi-stablelists -The kABI package contains information pertaining to the CentOS -kernel ABI, including lists of kernel symbols that are needed by +The kABI package contains information pertaining to the Red Hat Enterprise +Linux kernel ABI, including lists of kernel symbols that are needed by external Linux kernel modules, and a yum plugin to aid enforcement. %if %{with_kabidw_base} @@ -809,8 +818,8 @@ Summary: The baseline dataset for kABI verification using DWARF data Group: System Environment/Kernel AutoReqProv: no %description kernel-kabidw-base-internal -The package contains data describing the current ABI of the CentOS -kernel, suitable for the kabi-dw tool. +The package contains data describing the current ABI of the Red Hat Enterprise +Linux kernel, suitable for the kabi-dw tool. %endif # @@ -882,7 +891,7 @@ Requires: %{name}%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{?variant}%{?1:+%{1}}\ AutoReq: no\ AutoProv: yes\ %description %{?1:%{1}-}modules-internal\ -This package provides kernel modules for the %{?2:%{2} }kernel package for CentOS internal usage.\ +This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat internal usage.\ %{nil} # @@ -1080,7 +1089,6 @@ ApplyOptionalPatch() } %setup -q -n %{name}-%{rpmversion}-%{pkgrelease} -c -cp -v %{SOURCE9000} linux-%{rpmversion}-%{pkgrelease}/certs/rhel.pem mv linux-%{rpmversion}-%{pkgrelease} linux-%{KVERREL} cd linux-%{KVERREL} @@ -2079,9 +2087,11 @@ popd pushd tools/gpio %{tools_make} DESTDIR=%{buildroot} install popd +install -m644 -D %{SOURCE2002} %{buildroot}%{_sysconfdir}/logrotate.d/kvm_stat pushd tools/kvm/kvm_stat make INSTALL_ROOT=%{buildroot} install-tools make INSTALL_ROOT=%{buildroot} install-man +install -m644 -D kvm_stat.service %{buildroot}%{_unitdir}/kvm_stat.service popd # install VM tools pushd tools/vm/ @@ -2441,6 +2451,8 @@ fi %{_bindir}/gpio-event-mon %{_mandir}/man1/kvm_stat* %{_bindir}/kvm_stat +%{_unitdir}/kvm_stat.service +%config(noreplace) %{_sysconfdir}/logrotate.d/kvm_stat %{_bindir}/page_owner_sort %{_bindir}/slabinfo @@ -2599,6 +2611,514 @@ fi # # %changelog +* Mon Mar 29 2021 Bruno Meneguele [4.18.0-301.1.el8] +- tick: Get rid of tick_period (Phil Auld) [1936504] +- tick/sched: Release seqcount before invoking calc_load_global() (Phil Auld) [1936504] +- tick/sched: Optimize tick_do_update_jiffies64() further (Phil Auld) [1936504] +- tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() (Phil Auld) [1936504] +- tick/sched: Use tick_next_period for lockless quick check (Phil Auld) [1936504] +- tick: Document protections for tick related data (Phil Auld) [1936504] +- tick/broadcast: Serialize access to tick_next_period (Phil Auld) [1936504] +- timekeeping: Split jiffies seqlock (Phil Auld) [1936504] +- tick/sched: Annotate lockless access to last_jiffies_update (Phil Auld) [1936504] +- net, sctp, filter: remap copy_from_user failure error (Hangbin Liu) [1929476] {CVE-2021-20239} +- tty: serial_core: Set port active bit in uart_port_activate (Artem Savkov) [1915177] +- cgroup: fix psi monitor for root cgroup (Waiman Long) [1936868] +- cgroup-v1: add disabled controller check in cgroup1_parse_param() (Waiman Long) [1936868] +- cgroup: cgroup.{procs,threads} factor out common parts (Waiman Long) [1936868] +- cpuset: fix typos in comments (Waiman Long) [1936868] +- kernel: cgroup: Mundane spelling fixes throughout the file (Waiman Long) [1936868] +- cgroup/cgroup.c: replace 'of->kn->priv' with of_cft() (Waiman Long) [1936868] +- cgroup: Zero sized write should be no-op (Waiman Long) [1936868] +- cgroup: remove redundant kernfs_activate in cgroup_setup_root() (Waiman Long) [1936868] +- cgroup: Use generic ns_common::count (Waiman Long) [1936868] +- ns: Add a common refcount into ns_common (Waiman Long) [1936868] +- cgroup: add cpu.stat file to root cgroup (Waiman Long) [1936868] +- cgroup: Remove stale comments (Waiman Long) [1936868] +- cgroup: Restructure release_agent_path handling (Waiman Long) [1936868] +- cgroup: add cgroup_may_write() helper (Waiman Long) [1936868] +- cgroup: refactor fork helpers (Waiman Long) [1936868] +- cgroup: add cgroup_get_from_file() helper (Waiman Long) [1936868] +- cgroup: unify attach permission checking (Waiman Long) [1936868] +- cpuset: Make cpuset hotplug synchronous (Waiman Long) [1936868] +- cgroup: Clean up css_set task traversal (Waiman Long) [1936868] +- cgroup.c: Use built-in RCU list checking (Waiman Long) [1936868] +- fork: record start_time late (Waiman Long) [1936868] +- sched/deadline: Reduce rq lock contention in dl_add_task_root_domain() (Phil Auld) [1936501] +- sched/deadline: Fix sched_dl_global_validate() (Phil Auld) [1936501] +- sched/deadline: Optimize sched_dl_global_validate() (Phil Auld) [1936501] +- sched/deadline: Fix a typo in a comment (Phil Auld) [1936501] +- sched/deadline: Implement fallback mechanism for !fit case (Phil Auld) [1936501] +- sched/deadline: Make DL capacity-aware (Phil Auld) [1936501] +- sched/deadline: Improve admission control for asymmetric CPU capacities (Phil Auld) [1936501] +- sched/deadline: Add dl_bw_capacity() (Phil Auld) [1936501] +- sched/deadline: Optimize dl_bw_cpus() (Phil Auld) [1936501] +- sched/deadline: Impose global limits on sched_attr::sched_period (Phil Auld) [1936501] +- ibmvnic: fix a race between open and reset (Diego Domingos) [1940042] +- ibmvnic: Set to CLOSED state even on error (Diego Domingos) [1940042] +- ibmvnic: device remove has higher precedence over reset (Diego Domingos) [1940042] +- ibmvnic: merge do_change_param_reset into do_reset (Diego Domingos) [1940042] +- ibmvfc: disable MQ channelization by default (Gustavo Luiz Duarte) [1939359] +- pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process() (Steve Dickson) [1926945] +- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930833] {CVE-2021-27365} +- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930856] {CVE-2021-27363} +- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930809] {CVE-2021-27364} +- futex: Handle faults correctly for PI futexes (Waiman Long) [1924635] +- futex: Simplify fixup_pi_state_owner() (Waiman Long) [1924635] +- futex: Use pi_state_update_owner() in put_pi_state() (Waiman Long) [1924635] +- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Waiman Long) [1924635] +- futex: Provide and use pi_state_update_owner() (Waiman Long) [1924635] +- futex: Replace pointless printk in fixup_owner() (Waiman Long) [1924635] +- futex: Ensure the correct return value from futex_lock_pi() (Waiman Long) [1924635] +- futex: Don't enable IRQs unconditionally in put_pi_state() (Waiman Long) [1924635] +- futex: Fix incorrect should_fail_futex() handling (Waiman Long) [1924635] +- futex: Consistently use fshared as boolean (Waiman Long) [1924635] +- futex: Remove needless goto's (Waiman Long) [1924635] +- futex: Remove put_futex_key() (Waiman Long) [1924635] +- NFS: Correct size calculation for create reply length (Benjamin Coddington) [1934903] +- SUNRPC: Set memalloc_nofs_save() for sync tasks (Benjamin Coddington) [1934098] +- net/mlx5: CT: Add support for matching on ct_state reply flag (Alaa Hleihel) [1919651] +- net/mlx5e: CT: manage the lifetime of the ct entry object (Alaa Hleihel) [1919651] +- net/mlx5e: CT: Use per flow counter when CT flow accounting is enabled (Alaa Hleihel) [1919651] +- net/mlx5e: Fix a use after free on error in mlx5_tc_ct_shared_counter_get() (Alaa Hleihel) [1919651] +- net/mlx5e: CT: Use the same counter for both directions (Alaa Hleihel) [1919651] +- ethtool: fix the check logic of at least one channel for RX/TX (Ivan Vecera) [1907406] + +* Wed Mar 24 2021 Bruno Meneguele [4.18.0-300.1.el8] +- [scsi] scsi: qedi: Correct max length of CHAP secret (Nilesh Javali) [1909180] +- redhat: use tags from git notes for zstream to generate changelog (Frantisek Hrbata) +- redhat: add CI file for kernel-private (Bruno Meneguele) +- CI: Drop unused variable (Bruno Meneguele) +- CI: Enable RT verification (Bruno Meneguele) +- KVM: SVM: Clear the CR4 register on reset (Vitaly Kuznetsov) [1920788] +- net: flow_offload: Add original direction flag to ct_metadata (Marcelo Ricardo Leitner) [1921946] +- net/sched: cls_flower: Add match on the ct_state reply flag (Marcelo Ricardo Leitner) [1921946] +- net/sched: cls_flower add CT_FLAGS_INVALID flag support (Marcelo Ricardo Leitner) [1921946] +- net/sched: cls_flower: Reject invalid ct_state flags rules (Marcelo Ricardo Leitner) [1921946] +- netlink: add mask validation (Marcelo Ricardo Leitner) [1921946] +- netlink: create helpers for checking type is an int (Marcelo Ricardo Leitner) [1921946] +- netlink: policy: correct validation type check (Marcelo Ricardo Leitner) [1921946] +- netlink: make NLA_BINARY validation more flexible (Marcelo Ricardo Leitner) [1921946] + +* Mon Mar 22 2021 Bruno Meneguele [4.18.0-299.1.el8] +- md: Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1901598] +- md: improve variable names in md_flush_request() (Xiao Ni) [1901598] +- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1925711] +- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1925711] +- vt: Disable KD_FONT_OP_COPY (Dave Airlie) [1903937] {CVE-2020-28974} +- drm/i915/rkl: Remove require_force_probe protection (Lyude Paul) [1937558] +- drm/i915/tgl/psr: Disable PSR on Tigerlake for now (Lyude Paul) [1924702] +- dm raid: fix discard limits for raid0 and raid10 (Mike Snitzer) [1934274] +- dm: fix __send_changing_extent_only to avoid duplicate dm_target_offset() (Mike Snitzer) [1934274] +- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Waiman Long) [1934212] +- mm: memcontrol: fix slub memory accounting (Waiman Long) [1934212] +- mm: memcontrol: fix swap undercounting in cgroup2 (Waiman Long) [1934212] +- mm: memcontrol: fix NR_ANON_THPS accounting in charge moving (Waiman Long) [1934212] +- mm, slub: better heuristic for number of cpus when calculating slab order (Waiman Long) [1934212] +- Revert "mm: memcontrol: avoid workload stalls when lowering memory.high" (Waiman Long) [1934212] +- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed (Hangbin Liu) [1931732] +- selftests/bpf: No need to drop the packet when there is no geneve opt (Hangbin Liu) [1931732] + +* Tue Mar 16 2021 Bruno Meneguele [4.18.0-298.1.el8] +- drm/i915/gen11+: Only load DRAM information from pcode (Lyude Paul) [1934537] +- drm/i915/dg1: Wait for pcode/uncore handshake at startup (Lyude Paul) [1934537] +- powercap/intel_rapl: add support for TigerLake Desktop (David Arcari) [1932457] +- powerpc/perf: Fix handling of privilege level checks in perf interrupt context (Gustavo Luiz Duarte) [1918411] +- NFSv4.2: fix error return on memory allocation failure (Scott Mayhew) [1917689] +- NFSv4.2: improve page handling for GETXATTR (Scott Mayhew) [1917689] +- NFSv4.2: Fix up the get/listxattr calls to rpc_prepare_reply_pages() (Scott Mayhew) [1917689] +- NFS: Fix rpcrdma_inline_fixup() crash with new LISTXATTRS operation (Scott Mayhew) [1917689] +- SUNRPC: Fix up xdr_set_page() (Benjamin Coddington) [1917689] +- NFSv4: Fix open coded xdr_stream_remaining() (Benjamin Coddington) [1917689] +- SUNRPC: Clean up the handling of page padding in rpc_prepare_reply_pages() (Benjamin Coddington) [1917689] +- SUNRPC: Fix up xdr_read_pages() to take arbitrary object lengths (Benjamin Coddington) [1917689] +- SUNRPC: Clean up helpers xdr_set_iov() and xdr_set_page_base() (Benjamin Coddington) [1917689] +- SUNRPC: Split out a function for setting current page (Benjamin Coddington) [1917689] +- SUNRPC: Fix up typo in xdr_init_decode() (Benjamin Coddington) [1917689] +- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Benjamin Coddington) [1917689] +- net: fix pos incrementment in ipv6_route_seq_next (Lorenzo Bianconi) [1926608] +- ipv6_route_seq_next should increase position index (Lorenzo Bianconi) [1926608] +- bpf: Clear subreg_def for global function return values (Yauheni Kaliuta) [1934062] +- igc: Fix returning wrong statistics (Corinna Vinschen) [1910873] + +* Fri Mar 12 2021 Bruno Meneguele [4.18.0-297.1.el8] +- KVM: nSVM: prepare guest save area while is_guest_mode is true (Vitaly Kuznetsov) [1860223] +- redhat: add CI file for kernel-private (Bruno Meneguele) +- CI: Drop unused variable (Veronika Kabatova) +- CI: Enable RT verification (Veronika Kabatova) +- redhat: use tags from git notes for zstream to generate changelog (Frantisek Hrbata) +- redhat: open the RHEL-8.5 development (Bruno Meneguele) [1930504] + +* Thu Mar 11 2021 Jan Stancek [4.18.0-297.el8] +- KVM: SVM: Make symbol 'svm_gp_erratum_intercept' static (Paolo Bonzini) [1769283] +- KVM: SVM: Fix #GP handling for doubly-nested virtualization (Paolo Bonzini) [1769283] +- KVM: SVM: Add support for SVM instruction address check change (Paolo Bonzini) [1769283] +- KVM: SVM: Add emulation support for #GP triggered by SVM instructions (Paolo Bonzini) [1769283] +- KVM: x86: Factor out x86 instruction emulation with decoding (Paolo Bonzini) [1769283] +- gfs2: In gfs2_ail1_start_one unplug the IO when needed (Bob Peterson) [1648446] +- gfs2: Free rd_bits later in gfs2_clear-rgrpd to fix use-after-free (Bob Peterson) [1648446] +- gfs2: Only access gl_delete for iopen glocks (Bob Peterson) [1648446] +- gfs2: Fix case in which ail writes are done to jdata holes (Bob Peterson) [1648446] +- gfs2: simplify gfs2_block_map (Bob Peterson) [1648446] +- gfs2: Only set PageChecked if we have a transaction (Bob Peterson) [1648446] +- gfs2: don't lock sd_ail_lock in gfs2_releasepage (Bob Peterson) [1648446] +- gfs2: make gfs2_ail1_empty_one return the count of active items (Bob Peterson) [1648446] +- gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe (Bob Peterson) [1648446] +- gfs2: enhance log_blocks trace point to show log blocks free (Bob Peterson) [1648446] +- gfs2: rename gfs2_write_full_page to gfs2_write_jdata_page, remove parm (Bob Peterson) [1648446] +- PM: hibernate: flush swap writer after marking (Lenny Szubowicz) [1898677] +- cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown (Lenny Szubowicz) [1898677] +- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (Lenny Szubowicz) [1898677] +- bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation (Jiri Benc) [1882215] +- ice, xsk: clear the status bits for the next_to_use descriptor (Jiri Benc) [1906820] +- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925690] +- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925690] +- blk-mq: test QUEUE_FLAG_HCTX_ACTIVE for sbitmap_shared in hctx_may_queue (Ming Lei) [1922013] +- blk-mq: Improve performance of non-mq IO schedulers with multiple HW queues (Ming Lei) [1922013] +- Revert "blk-mq, elevator: Count requests per hctx to improve performance" (Ming Lei) [1922013] +- bpftool: Disable CAP_BPF check for feature command (Jiri Olsa) [1921542] +- RDMA/siw: Fix calculation of tx_valid_cpus size (Kamal Heib) [1919502] +- net/mlx5e: Disable performance optimization for IPv4/IPv6 ethertype (Alaa Hleihel) [1928671 1919807] +- IB/mlx5: Return appropriate error code instead of ENOMEM (Alaa Hleihel) [1928671] +- net/mlx5: Disable devlink reload for lag devices (Alaa Hleihel) [1928671 1929166] +- net/mlx5: Disable devlink reload for multi port slave device (Alaa Hleihel) [1928671 1929166] +- net/mlx5: Disallow RoCE on lag device (Alaa Hleihel) [1928671 1929166] +- net/mlx5: Disallow RoCE on multi port slave device (Alaa Hleihel) [1928671 1929166] +- net/mlx5: Fix health error state handling (Alaa Hleihel) [1928671] +- net/mlx5e: Change interrupt moderation channel params also when channels are closed (Alaa Hleihel) [1928671] +- net/mlx5e: Don't change interrupt moderation params when DIM is enabled (Alaa Hleihel) [1928671] +- net/mlx5e: E-switch, Fix rate calculation for overflow (Alaa Hleihel) [1928671] +- net/mlx5e: Release skb in case of failure in tc update skb (Alaa Hleihel) [1928671 1929119] +- net/mlx5e: Check tunnel offload is required before setting SWP (Alaa Hleihel) [1928671 1925439] +- net/mlx5e: kTLS, Use refcounts to free kTLS RX priv context (Alaa Hleihel) [1928671 1928706] +- net/mlx5e: Fix CQ params of ICOSQ and async ICOSQ (Alaa Hleihel) [1928671 1928706] +- net/mlx5e: Replace synchronize_rcu with synchronize_net (Alaa Hleihel) [1928671 1913616] +- net/mlx5e: Enable XDP for Connect-X IPsec capable devices (Alaa Hleihel) [1928671 1856795] +- net/mlx5e: Enable striding RQ for Connect-X IPsec capable devices (Alaa Hleihel) [1928671 1926120] +- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [1920776] {CVE-2020-0466} +- do_epoll_ctl(): clean the failure exits up a bit (Carlos Maiolino) [1920776] {CVE-2020-0466} +- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [1920776] {CVE-2020-0466} + +* Tue Mar 09 2021 Jan Stancek [4.18.0-296.el8] +- perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info (Prarit Bhargava) [1766743] +- perf/x86/intel/uncore: Store the logical die id instead of the physical die id. (Prarit Bhargava) [1766743] +- mm: fix page reference leak in soft_offline_page() (Aristeu Rozanski) [1768372] +- mm,hwpoison: try to narrow window race for free pages (Aristeu Rozanski) [1768372] +- mm,hwpoison: double-check page count in __get_any_page() (Aristeu Rozanski) [1768372] +- mm,hwpoison: introduce MF_MSG_UNSPLIT_THP (Aristeu Rozanski) [1768372] +- mm,hwpoison: return 0 if the page is already poisoned in soft-offline (Aristeu Rozanski) [1768372] +- mm,hwpoison: refactor soft_offline_huge_page and __soft_offline_page (Aristeu Rozanski) [1768372] +- mm,hwpoison: rework soft offline for in-use pages (Aristeu Rozanski) [1768372] +- mm,hwpoison: rework soft offline for free pages (Aristeu Rozanski) [1768372] +- mm,hwpoison: unify THP handling for hard and soft offline (Aristeu Rozanski) [1768372] +- mm,hwpoison: kill put_hwpoison_page (Aristeu Rozanski) [1768372] +- mm,hwpoison: refactor madvise_inject_error (Aristeu Rozanski) [1768372] +- mm,hwpoison: unexport get_hwpoison_page and make it static (Aristeu Rozanski) [1768372] +- mm,hwpoison-inject: don't pin for hwpoison_filter (Aristeu Rozanski) [1768372] +- mm, hwpoison: remove recalculating hpage (Aristeu Rozanski) [1768372] +- mm,hwpoison: cleanup unused PageHuge() check (Aristeu Rozanski) [1768372] +- mm/madvise.c: replace with page_size() in madvise_inject_error() (Aristeu Rozanski) [1768372] +- mm, soft-offline: convert parameter to pfn (Aristeu Rozanski) [1768372] +- tick/nohz: Revert "Narrow down noise while setting current task's tick dependency" (Waiman Long) [1931004] +- kvm: Add kvm_stat.service file and kvm_stat logrotate config to the tools (Thomas Huth) [1919930] +- igc: fix link speed advertising (Corinna Vinschen) [1769701] +- [crypto] crypto: qat - add capability detection logic in qat_4xxx (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add AES-XTS support for QAT GEN4 devices (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add AES-CTR support for QAT GEN4 devices (Vladis Dronov) [1833004] +- [crypto] crypto: qat - fix excluded_middle.cocci warnings (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add qat_4xxx driver (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add hook to initialize vector routing table (Vladis Dronov) [1833004] +- [crypto] crypto: qat - target fw images to specific AEs (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add gen4 firmware loader (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add support for broadcasting mode (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add support for shared ustore (Vladis Dronov) [1833004] +- [crypto] crypto: qat - allow to target specific AEs (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add FCU CSRs to chip info (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add CSS3K support (Vladis Dronov) [1833004] +- [crypto] crypto: qat - use ae_mask (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add check for null pointer (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add misc control CSR to chip info (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add wake up event to chip info (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add clock enable CSR to chip info (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add reset CSR and mask to chip info (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add local memory size to chip info (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add support for lm2 and lm3 (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add next neighbor to chip_info (Vladis Dronov) [1833004] +- [crypto] crypto: qat - replace check based on DID (Vladis Dronov) [1833004] +- [crypto] crypto: qat - introduce chip info structure (Vladis Dronov) [1833004] +- [crypto] crypto: qat - refactor long expressions (Vladis Dronov) [1833004] +- [crypto] crypto: qat - refactor qat_uclo_set_ae_mode() (Vladis Dronov) [1833004] +- [crypto] crypto: qat - move defines to header files (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove global CSRs helpers (Vladis Dronov) [1833004] +- [crypto] crypto: qat - refactor AE start (Vladis Dronov) [1833004] +- [crypto] crypto: qat - change micro word data mask (Vladis Dronov) [1833004] +- [crypto] crypto: qat - change type for ctx_mask (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add support for relative FW ucode loading (Vladis Dronov) [1833004] +- [crypto] crypto: qat - rename qat_uclo_del_uof_obj() (Vladis Dronov) [1833004] +- [crypto] crypto: qat - introduce additional parenthesis (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove unnecessary parenthesis (Vladis Dronov) [1833004] +- [crypto] crypto: qat - fix error message (Vladis Dronov) [1833004] +- [crypto] crypto: qat - fix CSR access (Vladis Dronov) [1833004] +- [crypto] crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Vladis Dronov) [1833004] +- [crypto] crypto: qat - support for mof format in fw loader (Vladis Dronov) [1833004] +- [crypto] crypto: qat - replace pci with PCI in comments (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove cast for mailbox CSR (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove unneeded semicolon (Vladis Dronov) [1833004] +- [crypto] crypto: qat - extend ae_mask (Vladis Dronov) [1833004] +- [crypto] crypto: qat - allow for instances in different banks (Vladis Dronov) [1833004] +- [crypto] crypto: qat - refactor qat_crypto_dev_config() (Vladis Dronov) [1833004] +- [crypto] crypto: qat - refactor qat_crypto_create_instances() (Vladis Dronov) [1833004] +- [crypto] crypto: qat - change return value in adf_cfg_key_val_get() (Vladis Dronov) [1833004] +- [crypto] crypto: qat - change return value in adf_cfg_add_key_value_param() (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove unnecessary void* casts (Vladis Dronov) [1833004] +- [crypto] crypto: qat - call functions in adf_sriov if available (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove hardcoded bank irq clear flag mask (Vladis Dronov) [1833004] +- [crypto] crypto: qat - abstract writes to arbiter enable (Vladis Dronov) [1833004] +- [crypto] crypto: qat - use BIT_ULL() - 1 pattern for masks (Vladis Dronov) [1833004] +- [crypto] crypto: qat - replace constant masks with GENMASK (Vladis Dronov) [1833004] +- [crypto] crypto: qat - abstract build ring base (Vladis Dronov) [1833004] +- [crypto] crypto: qat - enable ring after pair is programmed (Vladis Dronov) [1833004] +- [crypto] crypto: qat - register crypto instances based on capability (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add support for capability detection (Vladis Dronov) [1833004] +- [crypto] crypto: qat - abstract arbiter access (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove unused macros in arbiter module (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove writes into WQCFG (Vladis Dronov) [1833004] +- [crypto] crypto: qat - update constants table (Vladis Dronov) [1833004] +- [crypto] crypto: qat - use admin mask to send fw constants (Vladis Dronov) [1833004] +- [crypto] crypto: qat - change admin sequence (Vladis Dronov) [1833004] +- [crypto] crypto: qat - rename ME in AE (Vladis Dronov) [1833004] +- [crypto] crypto: qat - add packed to init admin structures (Vladis Dronov) [1833004] +- [crypto] crypto: qat - abstract admin interface (Vladis Dronov) [1833004] +- [crypto] crypto: qat - relocate GEN2 CSR access code (Vladis Dronov) [1833004] +- [crypto] crypto: qat - split transport CSR access logic (Vladis Dronov) [1833004] +- [crypto] crypto: qat - fix configuration of iov threads (Vladis Dronov) [1833004] +- [crypto] crypto: qat - num_rings_per_bank is device dependent (Vladis Dronov) [1833004] +- [crypto] crypto: qat - mask device capabilities with soft straps (Vladis Dronov) [1833004] +- [crypto] crypto: qat - update IV in software (Vladis Dronov) [1833004] +- [crypto] crypto: qat - remove unused function (Vladis Dronov) [1833004] + +* Fri Mar 05 2021 Jan Stancek [4.18.0-295.el8] +- mptcp: send ack for every add_addr (Davide Caratti) [1929280] +- Revert "[net] tcp: change pingpong threshold to 3" (Davide Caratti) [1929280] +- powerpc/pseries: Don't enforce MSI affinity with kdump (Greg Kurz) [1919427] +- rtc: disallow update interrupts when time is invalid (Waiman Long) [1918288] +- rtc: disable uie before setting time and enable after (Waiman Long) [1918288] +- rtc: don't reference bogus function pointer in kdoc (Waiman Long) [1918288] +- KVM: x86/mmu: Expand collapsible SPTE zap for TDP MMU to ZONE_DEVICE and HugeTLB pages (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Allow parallel page faults for the TDP MMU (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Mark SPTEs in disconnected pages as removed (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Flush TLBs after zap in TDP MMU PF handler (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Use atomic ops to set SPTEs in TDP MMU map (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Factor out functions to add/remove TDP MMU pages (Paolo Bonzini) [1897366] +- i915: kvmgt: the KVM mmu_lock is now an rwlock (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Use an rwlock for the x86 MMU (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Protect TDP MMU page table memory with RCU (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Clear dirtied pages mask bit before early break (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Skip no-op changes in TDP MMU functions (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Fix braces in kvm_recover_nx_lpages (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Factor out handling of removed page tables (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Don't redundantly clear TDP MMU pt memory (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Add lockdep when setting a TDP MMU SPTE (Paolo Bonzini) [1897366] +- KVM: x86/mmu: Add comment on __tdp_mmu_set_spte (Paolo Bonzini) [1897366] +- KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched (Paolo Bonzini) [1897366] +- locking/arch: Move qrwlock.h include after qspinlock.h (Paolo Bonzini) [1897366] +- sched: Add cond_resched_rwlock (Paolo Bonzini) [1897366] +- sched: Add needbreak for rwlocks (Paolo Bonzini) [1897366] +- locking/rwlocks: Add contention detection for rwlocks (Paolo Bonzini) [1897366] +- RDMA/srp: Fix support for unpopulated and unbalanced NUMA nodes (Kamal Heib) [1919395] +- net/vmw_vsock: fix NULL pointer dereference (Jon Maloy) [1925600] {CVE-2021-26708} +- net/vmw_vsock: improve locking in vsock_connect_timeout() (Jon Maloy) [1925600] {CVE-2021-26708} +- vsock: fix locking in vsock_shutdown() (Jon Maloy) [1925600] {CVE-2021-26708} +- vsock: fix the race conditions in multi-transport support (Jon Maloy) [1925600] {CVE-2021-26708} +- ahci: Add missing Intel Emmitsburg PCH RAID PCI IDs (David Arcari) [1928789] +- KVM: x86: Allow guests to see MSR_IA32_TSX_CTRL even if tsx=off (Paolo Bonzini) [1912448] +- [sound] ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Add mute LED quirk for more HP laptops (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Modify Dell platform name (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Jaroslav Kysela) [1916102] +- [sound] ALSA: ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Add quirk for MSI-GP73 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Supported Dell fixed type headset (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/hdmi: Fix incorrect mutex unlock in silent_stream_disable() (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/hdmi: packet buffer index must be set before reading value (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/hdmi: always print pin NIDs as hexadecimal (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/hdmi: fix silent stream for first playback to DP (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/conexant: add a new hda codec CX11970 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda: Fix regressions on clear and reconfig sysfs (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/proc - print DP-MST connections (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda - Fix the return value if cb func is already registered (Jaroslav Kysela) [1916102] +- [sound] ALSA: mixart: Fix mutex deadlock (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Add new codec supported for ALC897 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Fixed Dell AIO wrong sound tone (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - HP Headset Mic can't detect after boot (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Add supported mute Led for HP (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Enable headphone for ASUS TM420 (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/realtek - Fixed HP headset Mic can't be detected (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Jaroslav Kysela) [1916102] +- [sound] ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (Jaroslav Kysela) [1916102] +- [sound] ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (Jaroslav Kysela) [1916102] +- [fs] gfs2: Recursive gfs2_quota_hold in gfs2_iomap_end (Andreas Grunbacher) [1926852] +- [net] netfilter: nf_tables: coalesce multiple notifications into one skbuff (Phil Sutter) [1855207] +- [drm] drm/i915/rkl: new rkl ddc map for different PCH (Lyude Paul) [1910761] +- [drm] drm/nouveau: fix dma syncing warning with debugging on (Lyude Paul) [1915548] +- [drm] drm/i915: Update TGL and RKL HuC firmware versions (Lyude Paul) [1924209] +- [drm] drm/i915/tgl, rkl: Make Wa_1606700617/22010271021 permanent (Lyude Paul) [1924209] +- [drm] drm/i915: Update gen12 forcewake table (Lyude Paul) [1924209] +- [drm] drm/i915: Rename FORCEWAKE_BLITTER to FORCEWAKE_GT (Lyude Paul) [1924209] +- [drm] drm/i915/display/fbc: Implement WA 22010751166 (Lyude Paul) [1924209] +- [drm] drm/i915: Tweaked Wa_14010685332 for PCHs used on gen11 platforms (Lyude Paul) [1924209] +- [drm] drm/i915: Reorder hpd init vs. display resume (Lyude Paul) [1921868] +- [drm] drm/i915/dp: Don't use DPCD backlights that need PWM enable/disable (Lyude Paul) [1885406] +- [drm] drm/dp: Revert "drm/dp: Introduce EDID-based quirks" (Lyude Paul) [1885406] +- [drm] drm/i915/dp: Allow forcing specific interfaces through enable_dpcd_backlight (Lyude Paul) [1885406] +- [drm] drm/i915/dp: Enable Intel's HDR backlight interface (only SDR for now) (Lyude Paul) [1885406] +- [drm] drm/i915: Keep track of pwm-related backlight hooks separately (Lyude Paul) [1885406] +- [drm] drm/i915: Pass port to intel_panel_bl_funcs.get() (Lyude Paul) [1885406] +- [drm] drm/i915/dp: Add register definitions for Intel HDR backlight interface (Lyude Paul) [1885406] +- [drm] drm/i915/dp: Rename eDP VESA backlight interface functions (Lyude Paul) [1885406] +- [drm] drm/i915: Pass down brightness values to enable/disable backlight callbacks (Lyude Paul) [1885406] +- [drm] drm/i915: Rename pwm_* backlight callbacks to ext_pwm_* (Lyude Paul) [1885406] +- [drm] drm/i915/dp: Program source OUI on eDP panels (Lyude Paul) [1885406] +- [drm] drm/i915: refactor panel backlight control functions. (v2) (Lyude Paul) [1885406] +- [drm] drm/i915/backlight: fix CPU mode backlight takeover on LPT (Lyude Paul) [1885406] +- [drm] drm/i915/dpcd_bl: uncheck PWM_PIN_CAP when detect eDP backlight capabilities (Lyude Paul) [1885406] +- [drm] drm/i915: panel: Add get_vbt_pwm_freq() helper (Lyude Paul) [1885406] +- [drm] drm/i915/dp: Tweak initial dpcd backlight.enabled value (Lyude Paul) [1885406] +- [drm] kms: handle mDP connectors (Lyude Paul) [1876992] +- [drm] drm/i915/tgl: Fix Combo PHY DPLL fractional divider for 38.4MHz ref clock (Lyude Paul) [1876992] +- [drm] drm/i915/rkl: Add new cdclk table (Lyude Paul) [1876992] +- [drm] drm/i915/rkl: Handle HTI (Lyude Paul) [1876992] +- [drm] drm/i915/rkl: Add DPLL4 support (Lyude Paul) [1876992] +- [drm] drm/i915/rkl: Add initial workarounds (Lyude Paul) [1876992] +- [drm] drm/i915/rkl: Handle new DPCLKA_CFGCR0 layout (Lyude Paul) [1876992] +- [drm] drm/i915: Update TGL and RKL DMC firmware versions (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Program mocs:63 for cache eviction on gen9 (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Limit frequency drop to RPe on parking (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Retain default context state across shrinking (Lyude Paul) [1876992] +- [drm] drm/amdgpu/vcn3.0: remove old DPG workaround (Lyude Paul) [1876992] +- [drm] drm/amdgpu/vcn3.0: stall DPG when WPTR/RPTR reset (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Fixup tgl mocs for PTE tracking (Lyude Paul) [1876992] +- [drm] drm/amdgpu: add rlc iram and dram firmware support (Lyude Paul) [1876992] +- [drm] drm/nouveau: fix relocations applying logic and a double-free (Lyude Paul) [1876992] +- [drm] drm/amd/display: Avoid HDCP initialization in devices without output (Lyude Paul) [1876992] +- [drm] drm/amd/amdgpu: fix null pointer in runtime pm (Lyude Paul) [1876992] +- [drm] drm/amdgpu: update golden setting for sienna_cichlid (Lyude Paul) [1876992] +- [drm] drm/amdgpu: fix a page fault (Lyude Paul) [1876992] +- [drm] drm/amdgpu: fix SI UVD firmware validate resume fail (Lyude Paul) [1876992] +- [drm] drm/i915/tgl: Fix Media power gate sequence (Lyude Paul) [1876992] +- [drm] drm/i915: Handle max_bpc==16 (Lyude Paul) [1876992] +- [drm] drm/amd/display: Add missing pflip irq for dcn2.0 (Lyude Paul) [1876992] +- [drm] drm/gma500: Fix out-of-bounds access to struct drm_device.vblank (Lyude Paul) [1876992] +- [drm] drm/i915: Correctly set SFC capability for video engines (Lyude Paul) [1876992] +- [drm] drm/amd/display: Add missing pflip irq (Lyude Paul) [1876992] +- [drm] drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running (Lyude Paul) [1876992] +- [drm] drm/amd/pm: perform SMC reset on suspend/hibernation (Lyude Paul) [1876992] +- [drm] drm/amd/pm: correct the baco reset sequence for CI ASICs (Lyude Paul) [1876992] +- [drm] drm/amdgpu: perform srbm soft reset always on SDMA resume (Lyude Paul) [1876992] +- [drm] drm/i915/gem: Flush coherency domains on first set-domain-ioctl (Lyude Paul) [1876992] +- [drm] drm/i915: Hold onto an explicit ref to i915_vma_work.pinned (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Use the local HWSP offset during submission (Lyude Paul) [1876992] +- [drm] drm/i915: Fix encoder lookup during PSR atomic check (Lyude Paul) [1876992] +- [drm] drm/nouveau/gem: fix "refcount_t: underflow; use-after-free" (Lyude Paul) [1876992] +- [drm] drm/nouveau/nouveau: fix the start/end range for migration (Lyude Paul) [1876992] +- [drm] drm/amd/display: adding ddc_gpio_vga_reg_list to ddc reg def'ns (Lyude Paul) [1876992] +- [drm] drm/amd/display: Fixed panic during seamless boot (Lyude Paul) [1876992] +- [drm] drm/amdgpu: add DID for navi10 blockchain SKU (Lyude Paul) [1876992] +- [drm] drm/amdgpu: disable DCN and VCN for navi10 blockchain SKU(v3) (Lyude Paul) [1876992] +- [drm] drm/amdgpu: resolved ASD loading issue on sienna (Lyude Paul) [1876992] +- [drm] drm/amdgpu: update golden setting for sienna_cichlid (Lyude Paul) [1876992] +- [drm] drm/nouveau/device: fix changing endianess code to work on older GPUs (Lyude Paul) [1876992] +- [drm] drm/nouveau/kms/nv50-: Program notifier offset before requesting disp caps (Lyude Paul) [1876992] +- [drm] drm/i915: Restore ILK-M RPS support (Lyude Paul) [1876992] +- [drm] drm/i915: Reject 90/270 degree rotated initial fbs (Lyude Paul) [1876992] +- [drm] drm/i915: Use the active reference on the vma while capturing (Lyude Paul) [1876992] +- [drm] drm/i915: Mark ininitial fb obj as WT on eLLC machines to avoid rcu lockup during fbdev init (Lyude Paul) [1876992] +- [drm] drm/i915: Exclude low pages (128KiB) of stolen from use (Lyude Paul) [1876992] +- [drm] drm/i915: Drop runtime-pm assert from vgpu io accessors (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Delay execlist processing for tgl (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Undo forced context restores after trivial preemptions (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Initialize reserved and unspecified MOCS indices (Lyude Paul) [1876992] +- [drm] drm/i915: Fix TGL DKL PHY DP vswing handling (Lyude Paul) [1876992] +- [drm] drm/i915: Avoid mixing integer types during batch copies (Lyude Paul) [1876992] +- [drm] drm/i915: Cancel outstanding work after disabling heartbeats on an engine (Lyude Paul) [1876992] +- [drm] drm/i915: Break up error capture compression loops with cond_resched() (Lyude Paul) [1876992] +- [drm] drm/i915/gt: Always send a pulse down the engine after disabling heartbeat (Lyude Paul) [1876992] +- [drm] drm/i915/gem: Always test execution status on closing the context (Lyude Paul) [1876992] +- [drm] drm/i915/gem: Prevent using pgprot_writecombine() if PAT is not supported (Lyude Paul) [1876992] +- [drm] drm/i915/gem: Avoid implicit vmap for highmem on x86-32 (Lyude Paul) [1876992] +- [drm] drm/amdgpu: correct the cu and rb info for sienna cichlid (Lyude Paul) [1876992] +- [drm] drm/amd/psp: Fix sysfs: cannot create duplicate filename (Lyude Paul) [1876992] +- [drm] drm/amd/swsmu: add missing feature map for sienna_cichlid (Lyude Paul) [1876992] +- [drm] drm/amd/pm: fix pp_dpm_fclk (Lyude Paul) [1876992] +- [drm] drm/amd/pm: increase mclk switch threshold to 200 us (Lyude Paul) [1876992] +- [drm] drm/amdgpu/swsmu: drop smu i2c bus on navi1x (Lyude Paul) [1876992] +- [drm] drm/ttm: fix eviction valuable range check (Lyude Paul) [1876992] +- [drm] drm/amd/display: Fix kernel panic by dal_gpio_open() error (Lyude Paul) [1876992] +- [drm] drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally (Lyude Paul) [1876992] +- [drm] drm/amdgpu: increase the reserved VM size to 2MB (Lyude Paul) [1876992] +- [drm] drm/amdgpu: add function to program pbb mode for sienna cichlid (Lyude Paul) [1876992] +- [drm] drm/amd/display: Avoid MST manager resource leak (Lyude Paul) [1876992] +- [drm] drm/amdkfd: Use same SQ prefetch setting as amdgpu (Lyude Paul) [1876992] +- [drm] drm/amdgpu: correct the gpu reset handling for job != NULL case (Lyude Paul) [1876992] +- [drm] drm/amdgpu: update golden setting for sienna_cichlid (Lyude Paul) [1876992] +- [drm] drm/amdgpu: vcn and jpeg ring synchronization (Lyude Paul) [1876992] +- [drm] drm/amd/display: Increase timeout for DP Disable (Lyude Paul) [1876992] +- [drm] drm/amd/display: Fix incorrect backlight register offset for DCN (Lyude Paul) [1876992] +- [drm] drm/amdgpu: don't map BO in reserved region (Lyude Paul) [1876992] +- [drm] drm/shme-helpers: Fix dma_buf_mmap forwarding bug (Lyude Paul) [1876992] +- [drm] drm/i915: Force VT'd workarounds when running as a guest OS (Lyude Paul) [1876992] +- [drm] drm/amd/display: Avoid set zero in the requested clk (Lyude Paul) [1876992] +- [drm] drm/amd/display: HDMI remote sink need mode validation for Linux (Lyude Paul) [1876992] +- [drm] drm/amdgpu: No sysfs, not an error condition (Lyude Paul) [1876992] +- [drm] drm/amd/display: Check clock table return (Lyude Paul) [1876992] +- [drm] drm/bridge/synopsys: dsi: add support for non-continuous HS clock (Lyude Paul) [1876992] +- [drm] drm/vkms: avoid warning in vkms_get_vblank_timestamp (Lyude Paul) [1876992] +- [drm] drm/bridge_connector: Set default status connected for eDP connectors (Lyude Paul) [1876992] +- [drm] drm/scheduler: Scheduler priority fixes (v2) (Lyude Paul) [1876992] +- [drm] drm/amdgpu: restore ras flags when user resets eeprom(v2) (Lyude Paul) [1876992] +- [drm] drm/i915/gem: Serialise debugfs i915_gem_objects with ctx->mutex (Lyude Paul) [1876992] +- [drm] drm/amd/display: Disconnect pipe separetely when disable pipe split (Lyude Paul) [1876992] +- [drm] drm/hisilicon: Code refactoring for hibmc_drv_de (Lyude Paul) [1876992] +- [drm] drm/amd/display: Screen corruption on dual displays (DP+USB-C) (Lyude Paul) [1876992] +- [drm] drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create (Lyude Paul) [1876992] +- [drm] drm/amdgpu: Fix invalid number of character '{' in amdgpu_acpi_init (Lyude Paul) [1876992] +- [drm] drm/amdgpu: fix max_entries calculation v4 (Lyude Paul) [1876992] +- [drm] drm/crc-debugfs: Fix memleak in crc_control_write (Lyude Paul) [1876992] +- [drm] drm/gma500: fix error check (Lyude Paul) [1876992] +- [drm] drm/amd/display: fix potential integer overflow when shifting 32 bit variable bl_pwm (Lyude Paul) [1876992] +- [drm] drm/vkms: add missing platform_device_unregister() in vkms_init() (Lyude Paul) [1876992] +- [drm] drm/vgem: add missing platform_device_unregister() in vgem_init() (Lyude Paul) [1876992] +- [drm] drm/amd/display: Fix wrong return value in dm_update_plane_state() (Lyude Paul) [1876992] +- [drm] drm/vkms: fix xrgb on compute crc (Lyude Paul) [1876992] +- [iommu] iommu/amd: Set iommu->int_enabled consistently when interrupts are set up (Vitaly Kuznetsov) [1915038] +- [iommu] iommu/amd: Fix IOMMU interrupt generation in X2APIC mode (Vitaly Kuznetsov) [1915038] +- [iommu] iommu/amd: Fix union of bitfields in intcapxt support (Vitaly Kuznetsov) [1915038] +- [iommu] iommu/amd: Fix kerneldoc comments (Vitaly Kuznetsov) [1915038] +- [x86] x86/irq: Prepare consolidation of irq_alloc_info (Vitaly Kuznetsov) [1915038] +- [iommu] iommu/amd: Use msi_msg shadow structs (Vitaly Kuznetsov) [1915038] +- [iommu] x86_irq_Rename_X86_IRQ_ALLOC_TYPE_MSI_to_reflect_PCI_dependency (Vitaly Kuznetsov) [1915038] +- [netdrv] Revert "e1000e: disable s0ix entry and exit flows for ME systems" (Ken Cox) [1872412] +- [netdrv] e1000e: fix S0ix flow to allow S0i3.2 subset entry (Ken Cox) [1872412] + * Wed Mar 03 2021 Jan Stancek [4.18.0-294.el8] - dm table: fix DAX iterate_devices based device capability checks (Mike Snitzer) [1905679] - dm table: fix various whitespace issues with recent DAX code (Mike Snitzer) [1905679]