|
| 1 | +* Mon Sep 15 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-124.2.1.el10_1] |
| 2 | +- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-110294] |
| 3 | +- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-110294] |
| 4 | +- HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111038] {CVE-2025-38556} |
| 5 | +- Revert "KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace" (Eric Auger) [RHEL-112491] |
| 6 | +- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-106613] {CVE-2025-38396} |
| 7 | +- Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-109782] |
| 8 | +- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113560] {CVE-2025-39694} |
| 9 | +- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106059] {CVE-2025-38392} |
| 10 | +- redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83893] |
| 11 | +- x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} |
| 12 | +- x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} |
| 13 | +- KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} |
| 14 | +- x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} |
| 15 | +- x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83893 RHEL-83903] {CVE-2024-36357 CVE-2024-36350} |
| 16 | +- x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-83893] |
| 17 | +- x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-83893] |
| 18 | +- x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-83893] |
| 19 | +- x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83893] |
| 20 | +- x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83893] |
| 21 | +- x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83893] |
| 22 | +- x86/cpufeatures: Add X86_FEATURE_APX (Waiman Long) [RHEL-83893] |
| 23 | +- x86/cpufeatures: Shorten X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-83893] |
| 24 | +- x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-83893] |
| 25 | +- x86/cpufeatures: Clean up formatting (Waiman Long) [RHEL-83893] |
| 26 | +- x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-83893] |
| 27 | +- x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-83893] |
| 28 | +- x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-83893] |
| 29 | +- x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-83893] |
| 30 | +- x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-83893] |
| 31 | +- x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-83893] |
| 32 | +- x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-83893] |
| 33 | +- x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-83893] |
| 34 | +- x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-83893] |
| 35 | +- x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-83893] |
| 36 | +- x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-83893] |
| 37 | +- x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-83893] |
| 38 | +- x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-83893] |
| 39 | +- x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-83893] |
| 40 | +- x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-83893] |
| 41 | +- x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-83893] |
| 42 | +- x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-83893] |
| 43 | +- x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83893] |
| 44 | +- x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83893] |
| 45 | +- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83893] {CVE-2025-22047} |
| 46 | +- x86: move ZMM exclusion list into CPU feature flag (Waiman Long) [RHEL-83893] |
| 47 | +- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83893] |
| 48 | +- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83893] |
| 49 | +- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83893] |
| 50 | +- x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83893] |
| 51 | +- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83893] |
| 52 | +- x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83893] |
| 53 | +- x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83893] |
| 54 | +- x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83893] |
| 55 | +- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83893] |
| 56 | +- x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83893] |
| 57 | +- x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83893] |
| 58 | +- x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83893] |
| 59 | +Resolves: RHEL-106059, RHEL-106613, RHEL-109782, RHEL-110294, RHEL-111038, RHEL-112491, RHEL-113560, RHEL-83893, RHEL-83903 |
| 60 | + |
1 | 61 | * Mon Sep 08 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-124.1.1.el10_1] |
2 | 62 | - cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107880] |
3 | 63 | - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112787] {CVE-2025-38352} |
|
0 commit comments