[4.18.0-372.26.1.0.1.el8_6.OL8] - Update Oracle Linux certificates - Disable signing for aarch64 - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 15-11.0.5 debug: lockdown kgdb [Orabug: 34270802] {CVE-2022-21499} [4.18.0-372.26.1_6] - drm/amd/display: Ignore First MST Sideband Message Return Error [2109826 2089853] - ASoC: SOF: topology: read back control data from DSP [2117732 2065575] - ASoC: SOF: Drop ctrl_type parameter for snd_sof_ipc_set_get_comp_data [2117732 2065575] - ASoC: SOF: control: Do not handle control notification with component type [2117732 2065575] - ASoC: SOF: sof-audio: Drop the cmd member from struct snd_sof_control [2117732 2065575] - ASoC: SOF: Drop ctrl_cmd parameter for snd_sof_ipc_set_get_comp_data [2117732 2065575] - ASoC: SOF: topology: Set control_data-cmd alongside scontrol-cmd [2117732 2065575] - ASoC: SOF: Drop ipc_cmd parameter for snd_sof_ipc_set_get_comp_data [2117732 2065575] - ASoC: SOF: ipc: Rename send parameter in snd_sof_ipc_set_get_comp_data [2117732 2065575] - cgroup: Use css_tryget instead of css_tryget_online in task_get_css [2120776 2111491] - platform/x86/intel: Fix "rmmod pmt_telemetry" panic [2091079 2080426] - KVM: x86/mmu: make apf token non-zero to fix bug [2105340 2096201] - dommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting [2112983 2095498] [4.18.0-372.25.1_6] - redhat: add missing ybz numbers to changelog - block: limit request dispatch loop duration [2110772 2005082] - NLM: Defend against file_lock changes after vfs_test_lock [2102099 2094884] - x86/speculation/mmio: Print SMT warning [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA Processor MMIO Stale Data mitigations [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/tsx: Disable TSX development mode at boot [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/tsx: Clear CPUID bits when TSX always force aborts [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for cpu_show_srbds [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/cpu: Move arch_smt_update to a neutral place [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - ice: Ignore error message when setting same promiscuous mode [2118580 2100683] - ice: Fix clearing of promisc mode with bridge over bond [2118580 2100683] - ice: Ignore EEXIST when setting promisc mode [2118580 2100683] - ice: Fix double VLAN error when entering promisc mode [2118580 2100683] - ice: Fix promiscuous mode not turning off [2117026 2088787] - ice: Introduce enabling promiscuous mode on multiple VF"s [2117026 2088787] - ice: do not setup vlan for loopback VSI [2118582 2103845] - ice: check bits on Rx descriptor rather than [2118582 2103845] - ice: Fix max VLANs available for VF [2118581 2112298] - ice: change devlink code to read NVM in blocks [2118583 2093904] - ice: Fix memory corruption in VF driver [2102359 2037937] - ice: Fix queue config fail handling [2102359 2037937] - ice: Sync VLAN filtering features for DVM [2102359 2037937] - ice: Fix PTP TX timestamp offset calculation [2102359 2037937] - ice: Fix interrupt moderation settings getting cleared [2102359 2037937] - ice: fix possible under reporting of ethtool Tx and Rx statistics [2102359 2037937] - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV [2102359 2037937] - ice: add trace events for tx timestamps [2102359 2037937] - ice: fix return value check in ice_gnss.c [2102359 2037937] - ice: remove PF pointer from ice_check_vf_init [2102359 2037937] - ice: introduce ice_virtchnl.c and ice_virtchnl.h [2102359 2037937] - ice: cleanup long lines in ice_sriov.c [2102359 2037937] - ice: introduce ICE_VF_RESET_LOCK flag [2102359 2037937] - ice: introduce ICE_VF_RESET_NOTIFY flag [2102359 2037937] - ice: convert ice_reset_vf to take flags [2102359 2037937] - ice: convert ice_reset_vf to standard error codes [2102359 2037937] - ice: make ice_reset_all_vfs void [2102359 2037937] - ice: drop is_vflr parameter from ice_reset_all_vfs [2102359 2037937] - ice: move reset functionality into ice_vf_lib.c [2102359 2037937] - ice: fix a long line warning in ice_reset_vf [2102359 2037937] - ice: introduce VF operations structure for reset flows [2102359 2037937] - ice: fix incorrect dev_dbg print mistaking "i" for vf-vf_id [2102359 2037937] - ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h [2102359 2037937] - ice: use ice_is_vf_trusted helper function [2102359 2037937] - ice: log an error message when eswitch fails to configure [2102359 2037937] - ice: cleanup error logging for ice_ena_vfs [2102359 2037937] - ice: move ice_set_vf_port_vlan near other .ndo ops [2102359 2037937] - ice: refactor spoofchk control code in ice_sriov.c [2102359 2037937] - ice: rename ICE_MAX_VF_COUNT to avoid confusion [2102359 2037937] - ice: remove unused definitions from ice_sriov.h [2102359 2037937] - ice: convert vf-vc_ops to a const pointer [2102359 2037937] - ice: remove circular header dependencies on ice.h [2102359 2037937] - ice: rename ice_virtchnl_pf.c to ice_sriov.c [2102359 2037937] - ice: rename ice_sriov.c to ice_vf_mbx.c [2102359 2037937] - ice: Fix FV offset searching [2102359 2037937] - ice: Add support for outer dest MAC for ADQ tunnels [2102359 2037937] - ice: avoid XDP checks in ice_clean_tx_irq [2102359 2037937] - ice: change "can"t set link" message to dbg level [2102359 2037937] - ice: Add slow path offload stats on port representor in switchdev [2102359 2037937] - ice: Add support for inner etype in switchdev [2102359 2037937] - ice: convert VF storage to hash table with krefs and RCU [2102359 2037937] - ice: introduce VF accessor functions [2102359 2037937] - ice: factor VF variables to separate structure [2102359 2037937] - ice: convert ice_for_each_vf to include VF entry iterator [2102359 2037937] - ice: use ice_for_each_vf for iteration during removal [2102359 2037937] - ice: remove checks in ice_vc_send_msg_to_vf [2102359 2037937] - ice: move VFLR acknowledge during ice_free_vfs [2102359 2037937] - ice: move clear_malvf call in ice_free_vfs [2102359 2037937] - ice: pass num_vfs to ice_set_per_vf_res [2102359 2037937] - ice: store VF pointer instead of VF ID [2102359 2037937] - ice: refactor unwind cleanup in eswitch mode [2102359 2037937] - ice: add TTY for GNSS module for E810T device [2102359 2037937] - ice: Simplify tracking status of RDMA support [2102359 2037937] - ice: Add ability for PF admin to enable VF VLAN pruning [2102359 2037937] - ice: Add support for 802.1ad port VLANs VF [2102359 2037937] - ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev [2102359 2037937] - ice: Support configuring the device to Double VLAN Mode [2102359 2037937] - ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 [2102359 2037937] - ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads [2102359 2037937] - ice: Add outer_vlan_ops and VSI specific VLAN ops implementations [2102359 2037937] - ice: Adjust naming for inner VLAN operations [2102359 2037937] - ice: Use the proto argument for VLAN ops [2102359 2037937] - ice: Refactor vf-port_vlan_info to use ice_vlan [2102359 2037937] - ice: Introduce ice_vlan struct [2102359 2037937] - ice: Add new VSI VLAN ops [2102359 2037937] - ice: Add helper function for adding VLAN 0 [2102359 2037937] - ice: Refactor spoofcheck configuration functions [2102359 2037937] - Revert "ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured" [2102359 2037937] - Revert "ice: Do not enable VLAN pruning when spoofchk is enabled" [2102359 2037937] - ice: Remove likely for napi_complete_done [2102359 2037937] - ice: add support for DSCP QoS for IDC [2102359 2037937] - ice: respect metadata on XSK Rx to skb [2102359 2037937] - ice: don"t reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb [2102359 2037937] - ice: respect metadata in legacy-rx/ice_construct_skb [2102359 2037937] - ice: Fix broken IFF_ALLMULTI handling [2102359 2037937] - iavf: Fix VLAN_V2 addition/rejection [2118707 2115618] - iavf: Fix deadlock in initialization [2118705 2054656] - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection [2110768 2044160] - sched/deadline: Fix BUG_ON condition for deboosted tasks [2117410 2111860] [4.18.0-372.24.1_6] - powerpc/64: Move paca allocation later in boot [2092241 2016335] - powerpc/prom: fix early DEBUG messages [2092241 2016335] - powerpc: Set crashkernel offset to mid of RMA region [2092241 2016335] - hv_balloon: rate-limit "Unhandled message" warning [2117050 2087270] - powerpc: Enable execve syscall exit tracepoint [2106662 2095521] - ice: Fix VSIs unable to share unicast MAC [2111936 2080033] [4.18.0-372.23.1_6] - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist [2112030 2089715] - iavf: Fix issue with MAC address of VF shown as zero [2102360 2037938] - iavf: Remove non-inclusive language [2102360 2037938] - iavf: Fix incorrect use of assigning iavf_status to int [2102360 2037938] - iavf: stop leaking iavf_status as "errno" values [2102360 2037938] - iavf: Add usage of new virtchnl format to set default MAC [2102360 2037938] - iavf: refactor processing of VLAN V2 capability message [2102360 2037938] - iavf: Add support for 50G/100G in AIM algorithm [2102360 2037938] - iavf: remove redundant ret variable [2102360 2037938] - iavf: Remove useless DMA-32 fallback configuration [2102360 2037938] - pidfd: fix a poll race when setting exit_state [2107643 2044587] - fork: fix pidfd_poll"s return type [2107643 2044587] - pidfd: add polling support [2107643 2044587] - kabi: introduce the kabi_aux_* helpers [2107643 2044587] [4.18.0-372.22.1_6] - mm/memcg: Free percpu stats memory of dying memcg"s [2110039 2004037] [4.18.0-372.21.1_6] - KVM: x86/mmu: Don"t advance iterator after restart due to yielding [2081013 2058907] - RHEL-only: KVM: selftests: Fix AArch64 compilation [2107655 2071997] - x86/fpu: KVM: Set the base guest FPU uABI size to sizeof [2107652 2092066] - KVM: x86: Use ERR_PTR_USR to return -EFAULT as a __user pointer [2088288 2074679] - KVM: x86: add system attribute to retrieve full set of supported xsave states [2088288 2074679] - KVM: x86: Add a helper to retrieve userspace address from kvm_device_attr [2088288 2074679] - tools: arch: x86: pull in pvclock headers [2088288 2074679] - KVM: x86: Expose TSC offset controls to userspace [2088288 2074679] - KVM: x86: Refactor tsc synchronization code [2088288 2074679] - selftests: kvm: move vm_xsave_req_perm call to amx_test [2088288 2074679] - RHEL-only: KVM: selftests: Remove unused modes [2107655 2071997] - tools headers UAPI: Sync linux/kvm.h with the kernel sources [2088287 1918929] - kvm: selftests: sync uapi/linux/kvm.h with Linux header [2088287 1918929] - kvm: selftests: conditionally build vm_xsave_req_perm [2088287 1918929] - x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 [2088287 1918929] - x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 [2088287 1918929] - KVM: x86/cpuid: Exclude unpermitted xfeatures sizes at KVM_GET_SUPPORTED_CPUID [2088287 1918929] - KVM: x86: Move CPUID. mangling to __kvm_update_cpuid_runtime [2088287 1918929] - KVM: x86/cpuid: Clear XFD for component i if the base feature is missing [2088287 1918929] - KVM: x86: Do runtime CPUID update before updating vcpu-arch.cpuid_entries [2088287 1918929] - x86/fpu: Fix inline prefix warnings [2088287 1918929] - selftest: kvm: Add amx selftest [2088287 1918929] - selftest: kvm: Move struct kvm_x86_state to header [2088287 1918929] - selftest: kvm: Reorder vcpu_load_state steps for AMX [2088287 1918929] - kvm: x86: Disable interception for IA32_XFD on demand [2088287 1918929] - x86/fpu: Provide fpu_sync_guest_vmexit_xfd_state [2088287 1918929] - kvm: selftests: Add support for KVM_CAP_XSAVE2 [2088287 1918929] - kvm: x86: Add support for getting/setting expanded xstate buffer [2088287 1918929] - x86/fpu: Add uabi_size to guest_fpu [2088287 1918929] - kvm: x86: Add CPUID support for Intel AMX [2088287 1918929] - kvm: x86: Add XCR0 support for Intel AMX [2088287 1918929] - kvm: x86: Disable RDMSR interception of IA32_XFD_ERR [2088287 1918929] - kvm: x86: Emulate IA32_XFD_ERR for guest [2088287 1918929] - kvm: x86: Intercept #NM for saving IA32_XFD_ERR [2088287 1918929] - x86/fpu: Prepare xfd_err in struct fpu_guest [2088287 1918929] - kvm: x86: Add emulation for IA32_XFD [2088287 1918929] - x86/fpu: Provide fpu_update_guest_xfd for IA32_XFD emulation [2088287 1918929] - kvm: x86: Enable dynamic xfeatures at KVM_SET_CPUID2 [2088287 1918929] - x86/fpu: Provide fpu_enable_guest_xfd_features for KVM [2088287 1918929] - x86/fpu: Add guest support to xfd_enable_feature [2088287 1918929] - x86/fpu: Make XFD initialization in __fpstate_reset a function argument [2088287 1918929] - kvm: x86: Exclude unpermitted xfeatures at KVM_GET_SUPPORTED_CPUID [2088287 1918929] - kvm: x86: Fix xstate_required_size to follow XSTATE alignment rule [2088287 1918929] - x86/fpu: Prepare guest FPU for dynamically enabled FPU features [2088287 1918929] - x86/fpu: Extend fpu_xstate_prctl with guest permissions [2088287 1918929] - kvm: selftests: move ucall declarations into ucall_common.h [2088287 1918929] - kvm: selftests: move base kvm_util.h declarations to kvm_util_base.h [2088287 1918929] - cpuid: kvm_find_kvm_cpuid_features should be declared "static" [2088287 1918929] - KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES [2088287 1918929] - KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows [2088287 1918929] - tools arch x86: Sync the msr-index.h copy with the kernel sources [2107655 2071997] [4.18.0-372.20.1.el8_6] - powerpc/pseries: Fix use after free in remove_phb_dynamic [2081250 2073707] - mt76: mt7921: Fix the error handling path of mt7921_pci_probe [2101684 2096758] - mt76: mt7921e: fix possible probe failure after reboot [2095654 2078877] - x86/apic/vector: Fix ordering in vector assignment [2084646 2076607]