# changelog

author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50568
    - spec: create /etc/tuned/profiles directory
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - added an option to configure profile directories
      resolves: RHEL-26157
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.2.rc1
changelog:
  - fixed functions packaging and added explicit conflict with power-profiles-daemon
    related: RHEL-50568


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50568
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-2
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66638
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66615


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70457
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
      resolves: RHEL-51760
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
      resolves: RHEL-58820
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
      resolves: RHEL-72981
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
      resolves: RHEL-60906
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - sap-hana: Set transparent_hugepages to madvise
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: John Kacur <jkacur@redhat.com> - 1.6-3
changelog:
  - Upgrade the gating tests to match the kernel version in rteval-loads
  Resolves: rhbz#2166356
  jiraProject == RHELPLAN-147319


author: John Kacur <jkacur@redhat.com> - 1.6-4
changelog:
  - Upgrade the the kernel to linux-6.6.1
  - Make the gating tests match the correct kernel version
  Resolves: RHEL-14482


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.20.1.el9_6]
changelog:
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93253] {CVE-2025-37943}
  - ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87985] {CVE-2025-37785}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.21.1.el9_6]
changelog:
  - xsk: fix an integer overflow in xp_create_and_assign_umem() (CKI Backport Bot) [RHEL-87911] {CVE-2025-21997}
  - vlan: enforce underlying device type (Guillaume Nault) [RHEL-87884] {CVE-2025-21920}
  - net: fix geneve_opt length integer overflow (Guillaume Nault) [RHEL-87974] {CVE-2025-22055}
  - net: gso: fix ownership in __udp_gso_segment (CKI Backport Bot) [RHEL-88333] {CVE-2025-21926}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.22.1.el9_6]
changelog:
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87890] {CVE-2025-21969}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (David Marlin) [RHEL-87890] {CVE-2025-21969}
  - Revert "SUNRPC: Revert e0a912e8ddba" (Benjamin Coddington) [RHEL-94811]
  - mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Jay Shin) [RHEL-92291]
  - mm: fix crashes from deferred split racing folio migration (Jay Shin) [RHEL-92291] {CVE-2024-42234}
  - mm: memcg: fix split queue list crash when large folio migration (Jay Shin) [RHEL-92291]
  - proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86808] {CVE-2025-21999}
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87941] {CVE-2025-21963}
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (CKI Backport Bot) [RHEL-87931] {CVE-2025-21979}
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy (CKI Backport Bot) [RHEL-87931] {CVE-2025-21979}
  - eth: bnxt: fix truesize for mb-xdp-pass case (CKI Backport Bot) [RHEL-88328] {CVE-2025-21961}
  - vmxnet3: unregister xdp rxq info in the reset path (CKI Backport Bot) [RHEL-92471]
  - md: fix mddev uaf while iterating all_mddevs list (CKI Backport Bot) [RHEL-89062] {CVE-2025-22126}
  - nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-91163]
  - nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-91163]
  - media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-90323]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-90323]
  - media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-90323]
  - media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-90323]
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-86302]
  - smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94460] {CVE-2025-37750}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.23.1.el9_6]
changelog:
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94248] {CVE-2025-37738}
  - ibmvnic: Use kernel helpers for hex dumps (CKI Backport Bot) [RHEL-89019] {CVE-2025-22104}
  - ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-88310] {CVE-2025-21883}
  - ice: Fix deinitializing VF in error path (CKI Backport Bot) [RHEL-88310] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (CKI Backport Bot) [RHEL-88310] {CVE-2025-21883}
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-88322] {CVE-2025-21919}
  - redhat: configs: Enable CX231XX driver (Kate Hsuan) [RHEL-89730]
  - media: usb: usbtv: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-89730]
  - media: saa6752hs: Don't set format in sub-device state (Kate Hsuan) [RHEL-89730]
  - media: i2c: Use accessors for pad config 'try_*' fields (Kate Hsuan) [RHEL-89730]
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93629] {CVE-2025-23150}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.24.1.el9_6]
changelog:
  - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93465] {CVE-2023-52933}
  - net/mlx5: Fill out devlink dev info only for PFs (CKI Backport Bot) [RHEL-93770]
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89487]
  - dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89487]
  - dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89487]
  - dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89487]
  - NFS: O_DIRECT writes must check and adjust the file length (Benjamin Coddington) [RHEL-96060]
  - pnfs/flexfiles: retry getting layout segment for reads (Benjamin Coddington) [RHEL-96060]
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Benjamin Coddington) [RHEL-96060]
  - x86/tsc: Use topology_max_packages() to get package number (David Arcari) [RHEL-96886]
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-97519]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.25.1.el9_6]
changelog:
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99124] {CVE-2022-49846}
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97110] {CVE-2025-37799}
  - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-95252]
  - ipv6: mcast: extend RCU protection in igmp6_send() (CKI Backport Bot) [RHEL-94673] {CVE-2025-21759}
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CKI Backport Bot) [RHEL-93445] {CVE-2025-21887}
  - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93132] {CVE-2025-22004}
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-92268]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.26.1.el9_6]
changelog:
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98996] {CVE-2025-21991}
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-90212]
  - smb: client: fix perf regression with deferred closes (Paulo Alcantara) [RHEL-97482]
  - smb3 client: fix open hardlink on deferred close file error (Paulo Alcantara) [RHEL-97482]
  - Fix mmu notifiers for range-based invalidates (Jay Shin) [RHEL-93743]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-88275]
  - vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-88275]
  - mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-88275]
  - vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-88275]
  - vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-88275]
  - vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-88275]
  - vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-88275]
  - vfio/pci: Fallback huge faults for unaligned pfn (Donald Dutile) [RHEL-85623]
  - vfio/pci: implement huge_fault support (Donald Dutile) [RHEL-85623]
  - vfio/pci: Remove unused struct 'vfio_pci_mmap_vma' (Donald Dutile) [RHEL-85623]
  - vfio/pci: Insert full vma on mmap'd MMIO fault (Donald Dutile) [RHEL-85623]
  - vfio/pci: Use unmap_mapping_range() (Donald Dutile) [RHEL-85623]
  - mm/arm64: support large pfn mappings (Donald Dutile) [RHEL-85623]
  - mm/x86: support large pfn mappings (Donald Dutile) [RHEL-85623]
  - mm: remove follow_pte() (Donald Dutile) [RHEL-85623]
  - mm: follow_pte() improvements (Donald Dutile) [RHEL-85623]
  - mm/access_process_vm: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - vfio: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - mm/x86/pat: use the new follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - s390/pci_mmio: use follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - KVM: use follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - mm: pass VMA instead of MM to follow_pte() (Donald Dutile) [RHEL-85623]
  - mm: move follow_phys to arch/x86/mm/pat/memtype.c (Donald Dutile) [RHEL-85623]
  - mm: fix follow_pfnmap API lockdep assert (Donald Dutile) [RHEL-85623]
  - mm: new follow_pfnmap API (Donald Dutile) [RHEL-85623]
  - mm: remove follow_pfn (Donald Dutile) [RHEL-85623]
  - mm: always define pxx_pgprot() (Donald Dutile) [RHEL-85623]
  - mm/huge_memory: check pmd_special() only after pmd_present() (Donald Dutile) [RHEL-85623]
  - mm/fork: accept huge pfnmap entries (Donald Dutile) [RHEL-85623]
  - mm/pagewalk: check pfnmap for folio_walk_start() (Donald Dutile) [RHEL-85623]
  - mm/gup: detect huge pfnmap entries in gup-fast (Donald Dutile) [RHEL-85623]
  - mm: mark special bits for huge pfn mappings when inject (Donald Dutile) [RHEL-85623]
  - mm: drop is_huge_zero_pud() (Donald Dutile) [RHEL-85623]
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud (Donald Dutile) [RHEL-85623]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.27.1.el9_6]
changelog:
  - i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-100516]
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-87775]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-87775]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-87775]
  - net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-87775]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-87775]
  - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98772] {CVE-2024-58002}
  - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98772]
  - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98772]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.28.1.el9_6]
changelog:
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CKI Backport Bot) [RHEL-101327] {CVE-2025-38089}


author: Anubhav Shelat <ashelat@redhat.com> - 3.8-3
changelog:
  - Allow rteval to search /usr/bin/ for sysreport
  - Convert base64 data to text before wrapping.
  - Add sysreport to gating tests and check the exit status.
  Resolves: RHEL-44437


author: John Kacur <jkacur@redhat.com> - 3.8-4
changelog:
  - Add timerlat tracing
  - Add Fix -aNone being passed to cyclictest
  - Add rtla as a requires for timerlat
  Resolves: RHEL-35461


author: Crystal Wood <crwood@redhat.com> - 3.8-5
changelog:
  - Prevent using cyclictest and timerlat and the same time
  - Add a --noload option
  - Switch to autosetup, picking up the updates that should have been in 3.8-4
  Resolves: RHEL-35506
  Resolves: RHEL-50323


author: Anubhav Shelat <ashelat@redhat.com> - 3.8-6
changelog:
  - Add functionality to allow user to execute cpupower tool to
  set idle state depth  while running rteval.
  - Disable latency trick by using --default-system option with
  cyclictest when setting idle state depth.
  Resolves: RHEL-37645


author: John Kacur <jkacur@redhat.com> - 3.9-3
changelog:
  - Make the default interval for timerlat in rteval 1100us
  - Make cyclictest the default measurement module for rteval
  Resolves: RHEL-78394


author: Clark Williams <williams@redhat.com> - 2.5-1
changelog:
  - remove strip of realtime-entsk and generate debuginfo
  - ensure all files have valid SPDX license identifiers
  - remove Red Hat Makefile targets and specfile
  - Makefile cleanups and added .gitignore
  - drop the 'v' in the version string for the tarball
  - Makefile: add options for passing annocheck
  - Bump version to 2.5
  Resolves: RHEL-30179


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.22.1.rt14.307.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.22.1.rt14.307.el9_2 [2215122]
  - PCI: hv: Add a per-bus mutex state_lock (Vitaly Kuznetsov) [2217066 2182619]
  - Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" (Vitaly Kuznetsov) [2217066 2182619]
  - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (Vitaly Kuznetsov) [2217066 2182619]
  - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (Vitaly Kuznetsov) [2217066 2182619]
  - PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Vitaly Kuznetsov) [2217066 2182619]
  - hwmon: (coretemp) avoid RDMSR interrupts to isolated CPUs (Marcelo Tosatti) [2215552 2182083]
  - prlimit: do_prlimit needs to have a speculation check (Alex Gladkov) [2215107 2196317] {CVE-2023-0458}
  - x86: don't use REP_GOOD or ERMS for small memory clearing (Myron Stowe) [2196230 2190487]
  - x86/cpufeatures: Add macros for Intel's new fast rep string features (Myron Stowe) [2196230 2190487]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.23.1.rt14.308.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.23.1.rt14.308.el9_2 [2215122]
  - KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is disabled (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: fix APICv/x2AVIC disabled when vm reboot by itself (Maxim Levitsky) [2218871 2177720]
  - locking/rwbase: Mitigate indefinite writer starvation (Eder Zulian) [2217939 2037670]
  - rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov) [2216569 2212511]
  - rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov) [2216569 2212511]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-284.24.1.rt14.309.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.24.1.rt14.309.el9_2 [2222796]
  - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (Jerome Marchand) [2221157 2178234]
  - cifs: return a single-use cfid if we did not get a lease (Ronnie Sahlberg) [2221159 2175967]
  - cifs: Check the lease context if we actually got a lease (Ronnie Sahlberg) [2221159 2175967]
  - cifs: set rc to -ENOENT if we can not get a dentry for the cached dir (Ronnie Sahlberg) [2221159 2175967]
  - cifs: use LIST_HEAD() and list_move() to simplify code (Ronnie Sahlberg) [2221159 2175967]
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (Davide Caratti) [2219662 2218677] {CVE-2023-3090}
  - nvme: fix discard support without oncs (Ming Lei) [2192632 2174443]
  - nvme: fix handling single range discard request (Ming Lei) [2192632 2174443]
  - KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission faults (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Add helpers to query individual CR0/CR4 bits (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated (Paolo Bonzini) [2218935 2210042]
  - KVM: x86/mmu: Replace open coded usage of tdp_mmu_page with is_tdp_mmu_page() (Paolo Bonzini) [2218935 2210042]
  - KVM: x86/mmu: fix some comment typos (Paolo Bonzini) [2218935 2210042]
  - KVM: x86/mmu: Move TDP MMU VM init/uninit behind tdp_mmu_enabled (Paolo Bonzini) [2218935 2210042]
  - KVM: x86/mmu: Change tdp_mmu to a read-only parameter (Paolo Bonzini) [2218935 2210042]
  - KVM: VMX: Make CR0.WP a guest owned bit (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Make use of kvm_read_cr*_bits() when testing bits (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Ignore CR0.WP toggles in non-paging mode (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled (Paolo Bonzini) [2218935 2210042]
  - erspan: get the proto with the md version for collect_md (Xin Long) [2217493 2140037]
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216991 2214029] {CVE-2023-35788}
  - [redhat-rt] Update RTBZ for batch#3 (Patrick Talbert)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-284.25.1.rt14.310.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.25.1.rt14.310.el9_2 [2222796]
  - x86/speculation: Allow enabling STIBP with legacy IBRS (Ricardo Robaina) [2215108 2187267] {CVE-2023-1998}
  - netfilter: nf_dup_netdev: add and use recursion counter (Eric Garver) [2221169 1724795]
  - netfilter: nf_dup_netdev: do not push mac header a second time (Eric Garver) [2221169 1724795]
  - netfilter: egress: silence egress hook lockdep splats (Eric Garver) [2221169 1724795]
  - netfilter: nft_fwd_netdev: Support egress hook (Eric Garver) [2221169 1724795]
  - netfilter: nft_meta: add NFT_META_IFTYPE (Eric Garver) [2221169 1724795]
  - KVM: x86: Allow APICv APIC ID inhibit to be cleared (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Track required APICv inhibits with variable, not callback (Maxim Levitsky) [2218871 2177720]
  - Revert "KVM: SVM: Do not throw warning when calling avic_vcpu_load on a running vcpu" (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Ignore writes to Remote Read Data on AVIC write traps (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Handle multiple logical targets in AVIC kick fastpath (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Require logical ID to be power-of-2 for AVIC entry (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Update svm->ldr_reg cache even if LDR is "bad" (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Always update local APIC on writes to logical dest register (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Inhibit AVIC if vCPUs are aliased in logical mode (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Inhibit APICv/AVIC if the optimized physical map is disabled (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Honor architectural behavior for aliased 8-bit APIC IDs (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Disable APIC logical map if vCPUs are aliased in logical mode (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Disable APIC logical map if logical ID covers multiple MDAs (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Skip redundant x2APIC logical mode optimized cluster setup (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Explicitly track all possibilities for APIC map's logical modes (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Explicitly skip optimized logical map setup if vCPU's LDR==0 (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Add helper to perform final AVIC "kick" of single vCPU (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Document that vCPU ID == APIC ID in AVIC kick fastpatch (Maxim Levitsky) [2218871 2177720]
  - Revert "KVM: SVM: Use target APIC ID to complete x2AVIC IRQs when possible" (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Fix x2APIC Logical ID calculation for avic_kick_target_vcpus_fast (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Compute dest based on sender's x2APIC status for AVIC kick (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Replace "avic_mode" enum with "x2avic_enabled" boolean (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Inhibit APIC memslot if x2APIC and AVIC are enabled (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Move APIC access page helper to common x86 code (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Handle APICv updates for APIC "mode" changes via request (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Don't put/load AVIC when setting virtual APIC mode (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Flush the "current" TLB when activating AVIC (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Purge "highest ISR" cache when updating APICv state (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Blindly get current x2APIC reg value on "nodecode write" traps (Maxim Levitsky) [2218871 2177720]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.26.1.rt14.311.el9_2]
changelog:
  - net: openvswitch: fix upcall counter access before allocation (Eelco Chaudron) [2223310 2203263]
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221736 2221737] {CVE-2023-35001}
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id (Florian Westphal) [2221782 2221783] {CVE-2023-31248}
  - rtmutex: Ensure that the top waiter is always woken up (Joel Savitz) [2222121 2176147]
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Phil Sutter) [2216167 2214035] {CVE-2023-3390}
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Phil Sutter) [2216167 2214035] {CVE-2023-3390}
  - netfilter: nf_tables: fix chain binding transaction logic (Phil Sutter) [2225461 2225462] {CVE-2023-3390 CVE-2023-3610}
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Phil Sutter) [2216167 2214035] {CVE-2023-3390}
  - netfilter: nf_tables: validate catch-all set elements (Florian Westphal) [2216167 2214035] {CVE-2023-3390}
  - thunderbolt: Increase DisplayPort Connection Manager handshake timeout (Desnes Nunes) [2219463 2168851]
  - thunderbolt: Increase timeout of DP OUT adapter handshake (Desnes Nunes) [2219463 2212495]
  - ASoC: Intel: sof_sdw: add quick for Dell SKU 0BDA (Jaroslav Kysela) [2218960 2217298]
  - ASoC: Intel: soc-acpi: add tables for Dell SKU 0B34 (Jaroslav Kysela) [2218960 2217298]
  - ASoC: Intel: sof-sdw: add Dell SKU 0B34 (Jaroslav Kysela) [2218960 2217298]
  - ASoC: Intel: soc-acpi: add table for RPL Dell SKU 0BDA (Jaroslav Kysela) [2218960 2217298]
  - ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() (Mark Langsdorf) [2218026 2215972]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.27.1.rt14.312.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.27.1.rt14.312.el9_2 [2228482]
  - x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/core: Return an error only when necessary (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/AMD: Fix mixed steppings support (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/amd: Cache debug register values in percpu variables (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode: Adjust late loading result reporting message (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode: Check CPU capabilities after late microcode update correctly (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/AMD: Rename a couple of functions (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/AMD: Track patch allocation size explicitly (David Arcari) [2226821 1971938]
  - x86/microcode: Print previous version of microcode after reload (David Arcari) [2226821 1971938]
  - x86/cpu: Load microcode during restore_processor_state() (David Arcari) [2226821 1971938]
  - x86/pm: Add enumeration check before spec MSRs save/restore setup (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/tsx: Add a feature bit for TSX control MSR support (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/cpu: Restore AMD's DE_CFG MSR after resume (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/pm: Fix false positive kmemleak report in msr_build_context() (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/speculation: Restore speculation related MSRs during S3 resume (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/pm: Save the MSR validity status at context setup (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - libceph: harden msgr2.1 frame segment length checks (Ilya Dryomov) [2227070 2222253]
  - seccomp: Move copy_seccomp() to no failure path. (Viktor Malik) [2226945 2218682]
  - bpf: Adjust insufficient default bpf_jit_limit (Viktor Malik) [2226945 2218682]
  - crypto: ccp: Get rid of __sev_platform_init_locked()'s local function pointer (Bandan Das) [2224587 2152249]
  - crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (Bandan Das) [2224587 2152249]
  - x86/sev: Change snp_guest_issue_request()'s fw_err argument (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Double-buffer messages (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Add throttling awareness (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Do some code style cleanups (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Carve out the request issuing logic into a helper (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Simplify extended guest request handling (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (Bandan Das) [2224587 2152249]
  - virt/sev-guest: Return -EIO if certificate buffer is not large enough (Bandan Das) [2224587 2152249]
  - virt/sev-guest: Prevent IV reuse in the SNP guest driver (Bandan Das) [2224587 2152249]
  - x86/sev: Don't use cc_platform_has() for early SEV-SNP calls (Bandan Das) [2224587 2152249]
  - [redhat-rt] Update RTBZ for batch#3 (Herton R. Krzesinski)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.28.1.rt14.313.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.28.1.rt14.313.el9_2 [2228482]
  - iavf: fix reset task race with iavf_remove() (Petr Oros) [2228156 2223599]
  - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (Petr Oros) [2228156 2223599]
  - Revert "iavf: Do not restart Tx queues after reset task failure" (Petr Oros) [2228156 2223599]
  - Revert "iavf: Detach device during reset task" (Petr Oros) [2228156 2223599]
  - iavf: Wait for reset in callbacks which trigger it (Petr Oros) [2228156 2223599]
  - iavf: use internal state to free traffic IRQs (Petr Oros) [2228156 2223599]
  - iavf: Fix out-of-bounds when setting channels on remove (Petr Oros) [2228156 2223599]
  - iavf: Fix use-after-free in free_netdev (Petr Oros) [2228156 2223599]
  - iavf: make functions static where possible (Petr Oros) [2228156 2223599]
  - iavf: fix err handling for MAC replace (Petr Oros) [2228156 2223599]
  - iavf: remove some unused functions and pointless wrappers (Petr Oros) [2228156 2223599]
  - iavf: remove mask from iavf_irq_enable_queues() (Petr Oros) [2228156 2223599]
  - iavf: send VLAN offloading caps once after VFR (Petr Oros) [2228156 2223599]
  - i40e: Wait for pending VF reset in VF set callbacks (Ivan Vecera) [2228158 2215498]
  - i40e: Add helper for VF inited state check with timeout (Ivan Vecera) [2228158 2215498]
  - KEYS: use kfree_sensitive with key (Vladis Dronov) [2227768 2223719]
  - locking/rtmutex: Add a lockdep assert to catch potential nested blocking (Crystal Wood) [2225623 2218724]
  - locking/rtmutex: Avoid pointless blk_flush_plug() invocations (Crystal Wood) [2225623 2218724]
  - locking/rtmutex: Submit/resume work explicitly before/after blocking (Crystal Wood) [2225623 2218724]
  - sched/core: Provide sched_rtmutex() and expose sched work helpers (Crystal Wood) [2225623 2218724]
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (David Arcari) [2210270 2175626]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.29.1.rt14.314.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.29.1.rt14.314.el9_2 [2228482]
  - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Herbert Xu) [2231850 2227964]
  - i2c: tegra: Fix PEC support for SMBUS block read (Steve Best) [2230488 2214531]
  - i2c: tegra: Set ACPI node as primary fwnode (Steve Best) [2230483 2222101]
  - perf vendor events intel: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf vendor events intel: Refresh sapphirerapids metrics and events (Michael Petlan) [2230175 2177180]
  - perf vendor events: Update Intel sapphirerapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel/cstate: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel/uncore: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/msr: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/rapl: Add support for Intel Emerald Rapids (Michael Petlan) [2230175 2177180]
  - platform/x86: intel-uncore-freq: add Emerald Rapids support (Michael Petlan) [2230169 2156827]
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID (Phil Sutter) [2228992 2228993] {CVE-2023-4147}
  - netfilter: nft_set_pipapo: fix improper element removal (Phil Sutter) [2227518 2227519] {CVE-2023-4004}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.30.1.rt14.315.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.30.1.rt14.315.el9_2 [2228482]
  - sched/core: Add __always_inline to schedule_loop() (Crystal Wood) [2233928 2232098]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Tao Liu) [2232700 2182562]
  - arm64: efi: Make efi_rt_lock a raw_spinlock (Mark Salter) [2213502 2213503] {CVE-2023-21102}
  - efi: rt-wrapper: Add missing include (Mark Salter) [2213502 2213503] {CVE-2023-21102}
  - arm64: efi: Execute runtime services from a dedicated stack (Mark Salter) [2213502 2213503] {CVE-2023-21102}
  - crypto: rng - Fix lock imbalance in crypto_del_rng (Herbert Xu) [2232213 2229643]
  - drm/ast: Fix ARM compatibility (Robert Foss) [2232302 2192980]
  - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Mark Salter) [2231962 2179060]
  - genirq: GENERIC_IRQ_EFFECTIVE_AFF_MASK depends on SMP (Mark Salter) [2231962 2179060]
  - scsi: storvsc: Handle SRB status value 0x30 (Cathy Avery) [2231990 2224933]
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Cathy Avery) [2230747 2228298]
  - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Benjamin Marzinski) [2228481 2159623]
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225654 2225655] {CVE-2023-3776}
  - md: add error_handlers for raid0 and linear (Nigel Croxon) [2221170 2162219]
  - [redhat-rt] changelog: do not perform an empty Bugzilla query (Luis Claudio R. Goncalves)


