|
| 1 | +* Tue Jan 14 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-41.el10] |
| 2 | +- netfilter: IDLETIMER: Fix for possible ABBA deadlock (Phil Sutter) [RHEL-70301] |
| 3 | +- tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-73194] |
| 4 | +- netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-68691] |
| 5 | +- sched/numa: fix memory leak due to the overwritten vma->numab_state (Phil Auld) [RHEL-67478] |
| 6 | +- netfilter: ipset: Fix for recursive locking warning (Phil Sutter) [RHEL-71827] |
| 7 | +- NFSD: Mark exports of NFS as unsupported (Benjamin Coddington) [RHEL-50656] |
| 8 | +- netdev-genl: Hold rcu_read_lock in napi_get (Paolo Abeni) [RHEL-73205] |
| 9 | +- net: avoid potential UAF in default_operstate() (Paolo Abeni) [RHEL-73205] {CVE-2024-56635} |
| 10 | +- net: defer final 'struct net' free in netns dismantle (Paolo Abeni) [RHEL-73205] {CVE-2024-56658} |
| 11 | +- net: restrict SO_REUSEPORT to inet sockets (Paolo Abeni) [RHEL-73205] |
| 12 | +- Revert "rtnetlink: add guard for RTNL" (Paolo Abeni) [RHEL-73205] |
| 13 | +- netlink: fix false positive warning in extack during dumps (Paolo Abeni) [RHEL-73205] {CVE-2024-53212} |
| 14 | +- tcp: check space before adding MPTCP SYN options (Paolo Abeni) [RHEL-73143] |
| 15 | +- net: fix memory leak in tcp_conn_request() (Paolo Abeni) [RHEL-73143] |
| 16 | +- Revert "udp: avoid calling sock_def_readable() if possible" (Paolo Abeni) [RHEL-73132] |
| 17 | +- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-69538] |
| 18 | +- redhat: make kernel-debug-uki-virt installable without kernel-debug-core (Vitaly Kuznetsov) [RHEL-72983] |
| 19 | +- KVM: arm64: Fix S1/S2 combination when FWB==1 and S2 has Device memory type (Shaoqin Huang) [RHEL-68039] |
| 20 | +- KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Shaoqin Huang) [RHEL-68039] |
| 21 | +- KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Shaoqin Huang) [RHEL-68039] |
| 22 | +- KVM: arm64: selftests: Add tests for MMIO external abort injection (Shaoqin Huang) [RHEL-68039] |
| 23 | +- KVM: arm64: selftests: Convert to kernel's ESR terminology (Shaoqin Huang) [RHEL-68039] |
| 24 | +- tools: arm64: Grab a copy of esr.h from kernel (Shaoqin Huang) [RHEL-68039] |
| 25 | +- KVM: selftests: Don't bother deleting memslots in KVM when freeing VMs (Shaoqin Huang) [RHEL-68039] |
| 26 | +- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Shaoqin Huang) [RHEL-68039] |
| 27 | +- KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes (Shaoqin Huang) [RHEL-68039] |
| 28 | +- KVM: arm64: vgic: Kill VGIC_MAX_PRIVATE definition (Shaoqin Huang) [RHEL-68039] |
| 29 | +- KVM: arm64: vgic: Make vgic_get_irq() more robust (Shaoqin Huang) [RHEL-68039] |
| 30 | +- KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR (Shaoqin Huang) [RHEL-68039] |
| 31 | +- KVM: arm64: Pass on SVE mapping failures (Shaoqin Huang) [RHEL-68039] |
| 32 | +- KVM: arm64: Don't map 'kvm_vgic_global_state' at EL2 with pKVM (Shaoqin Huang) [RHEL-68039] |
| 33 | +- KVM: arm64: Just advertise SEIS as 0 when emulating ICC_CTLR_EL1 (Shaoqin Huang) [RHEL-68039] |
| 34 | +- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Shaoqin Huang) [RHEL-68039] |
| 35 | +- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Shaoqin Huang) [RHEL-68039] |
| 36 | +- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Shaoqin Huang) [RHEL-68039] |
| 37 | +- KVM: arm64: Don't retire aborted MMIO instruction (Shaoqin Huang) [RHEL-68039] |
| 38 | +- KVM: arm64: Get rid of userspace_irqchip_in_use (Shaoqin Huang) [RHEL-68039] |
| 39 | +- KVM: arm64: Initialize trap register values in hyp in pKVM (Shaoqin Huang) [RHEL-68039] |
| 40 | +- KVM: arm64: Initialize the hypervisor's VM state at EL2 (Shaoqin Huang) [RHEL-68039] |
| 41 | +- KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Shaoqin Huang) [RHEL-68039] |
| 42 | +- KVM: arm64: Move pkvm_vcpu_init_traps() to init_pkvm_hyp_vcpu() (Shaoqin Huang) [RHEL-68039] |
| 43 | +- KVM: arm64: Correctly access TCR2_EL1, PIR_EL1, PIRE0_EL1 with VHE (Shaoqin Huang) [RHEL-68039] |
| 44 | +Resolves: RHEL-50656, RHEL-67478, RHEL-68039, RHEL-68691, RHEL-69538, RHEL-70301, RHEL-71827, RHEL-72983, RHEL-73132, RHEL-73143, RHEL-73194, RHEL-73205 |
| 45 | + |
1 | 46 | * Sun Jan 12 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-40.el10] |
2 | 47 | - selftests: netfilter: Stabilize rpath.sh (Phil Sutter) [RHEL-71139] |
3 | 48 | - redhat/configs: automotive: disable CONFIG_AIO (Davide Caratti) [RHEL-71905] |
|
0 commit comments