List of RPMs for HyperScale X Platform Version 3.2604

The following RPMs are included in this version:

RPM Issue

autofs-5.1.4-114.el8_10.8.x86_64.rpm - RHEL-97546 - hung tasks after autofs reload
- quiet possibly noisy log message.
- fix devid update on reload.
- fix cache writelock must be taken in update_map_cache().
- fix skip valid map entries on expire cleanup.
- remove unnecessary call to set_direct_mount_tree_catatonic().
- remove unnecessary assignment in umount_multi().
- fix direct mount trigger umount failure case.
- refactor do_umount_autofs_direct().
- fix stale direct mount trigger not umounted on expire.
- add function table_lookup_ino().
- improve handling of missing map entry for mount request.
- Resolves: RHEL-97546
- RHEL-46409 - RFE: autofs: add handling for AMD 'nounmount' option
- fix amd cache options not copied.
- seperate amd mount and entry flags.
- make iocl ops ->timeout() handle per-dentry expire.
- refactor amd mount options handling.
- add some unimplemented amd map options.
- fix lookup search type in umount_subtree_mounts().
- fix remount_active_mount() not remounting symlinks.
- log when setting amd per-mount timeout.
- update per-mount expire timeout on readmap.
- clear per-mount timeout if not set.
- fix incorrect flags update in update_with_defaults().
- skip expire check for amd nounmount mounts.
- Resolves: RHEL-46409

bpftool-4.18.0-553.115.1.el8_10.x86_64.rpm - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}
- Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]
- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

brotli-1.0.6-4.el8_10.x86_64.rpm - Resolves: RHEL-133986
CVE-2025-6176 Brotli decompression bomb DoS in scrapy

coreutils-8.30-17.el8_10.x86_64.rpm - fold: fix processing of malformed UTF-8 sequences (RHEL-140117)

coreutils-common-8.30-17.el8_10.x86_64.rpm - fold: fix processing of malformed UTF-8 sequences (RHEL-140117)

cups-libs-2.2.6-67.el8_10.x86_64.rpm - RHEL-147205 - endless poll loop in http_write when POLLHUP is returned

curl-7.61.1-34.el8_10.11.x86_64.rpm - noproxy: support proxies specified using cidr notation (RHEL-86910)
- disable test1456 (requires test framework features not in 7.61.1)
- AWS Signature Version 4 authentication support (RHEL-116183)

glibc-2.28-251.el8_10.31.x86_64.rpm - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849)
- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787)
- rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889)
- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194)

glibc-all-langpacks-2.28-251.el8_10.31.x86_64.rpm - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849)
- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787)
- rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889)
- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194)

glibc-common-2.28-251.el8_10.31.x86_64.rpm - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849)
- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787)
- rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889)
- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194)

glibc-devel-2.28-251.el8_10.31.x86_64.rpm - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849)
- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787)
- rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889)
- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194)

glibc-gconv-extra-2.28-251.el8_10.31.x86_64.rpm - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849)
- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787)
- rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889)
- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194)

glibc-headers-2.28-251.el8_10.31.x86_64.rpm - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849)
- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787)
- rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889)
- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194)

gnutls-3.6.16-8.el8_10.5.x86_64.rpm - Backport the fixes for CVE-2025-9820 and CVE-2025-14831

grub2-common-2.02-170.el8_10.1.rocky.0.2.noarch.rpm - Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208
- Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

grub2-efi-x64-2.02-170.el8_10.1.rocky.0.2.x86_64.rpm - Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208
- Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

grub2-pc-2.02-170.el8_10.1.rocky.0.2.x86_64.rpm - Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208
- Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

grub2-pc-modules-2.02-170.el8_10.1.rocky.0.2.noarch.rpm - Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208
- Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

grub2-tools-2.02-170.el8_10.1.rocky.0.2.x86_64.rpm - Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208
- Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

grub2-tools-efi-2.02-170.el8_10.1.rocky.0.2.x86_64.rpm - Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208
- Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

grub2-tools-extra-2.02-170.el8_10.1.rocky.0.2.x86_64.rpm - Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208
- Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

grub2-tools-minimal-2.02-170.el8_10.1.rocky.0.2.x86_64.rpm - Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208
- Removing redhat old cert sources entries (Sherif Nagy)
- Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
- Porting to 8.10
- Cleaning up grup.macro extra signing certs and updating rocky test CA and CERT
- Cleaning up grup.macro extra signing certs
- Use rocky-sb-certs for secure boot signing
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

ipa-client-4.9.13-21.module+el8.10.0+40090+e6f37a74.x86_64.rpm - Fix memory leaks in IPA plugins
Resolves: RHEL-145410

ipa-client-common-4.9.13-21.module+el8.10.0+40090+e6f37a74.noarch.rpm - Fix memory leaks in IPA plugins
Resolves: RHEL-145410

ipa-common-4.9.13-21.module+el8.10.0+40090+e6f37a74.noarch.rpm - Fix memory leaks in IPA plugins
Resolves: RHEL-145410

ipa-selinux-4.9.13-21.module+el8.10.0+40090+e6f37a74.noarch.rpm - Fix memory leaks in IPA plugins
Resolves: RHEL-145410

iwl100-firmware-39.31.5.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl1000-firmware-39.31.5.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl105-firmware-18.168.6.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl135-firmware-18.168.6.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl2000-firmware-18.168.6.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl2030-firmware-18.168.6.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl3160-firmware-25.30.13.0-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl5000-firmware-8.83.5.1_1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl5150-firmware-8.24.2.2-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl6000-firmware-9.221.4.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl6000g2a-firmware-18.168.6.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl6000g2b-firmware-18.168.6.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl6050-firmware-41.28.5.1-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

iwl7260-firmware-25.30.13.0-135.el8_10.1.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

kernel-4.18.0-553.115.1.el8_10.x86_64.rpm - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]
- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

kernel-core-4.18.0-553.115.1.el8_10.x86_64.rpm - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]
- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

kernel-headers-4.18.0-553.115.1.el8_10.x86_64.rpm - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}
- Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]
- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

kernel-modules-4.18.0-553.115.1.el8_10.x86_64.rpm - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]
- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

kernel-tools-4.18.0-553.115.1.el8_10.x86_64.rpm - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}
- Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]
- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

kernel-tools-libs-4.18.0-553.115.1.el8_10.x86_64.rpm - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}
- Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]
- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

kexec-tools-2.0.26-14.el8_10.3.x86_64.rpm - Fix DNS server unreachable

libblkid-2.32.1-48.el8_10.x86_64.rpm - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

libcurl-7.61.1-34.el8_10.11.x86_64.rpm - noproxy: support proxies specified using cidr notation (RHEL-86910)
- disable test1456 (requires test framework features not in 7.61.1)
- AWS Signature Version 4 authentication support (RHEL-116183)

libertas-usb8388-firmware-20260112-135.git486ac8f9.el8_10.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

libfdisk-2.32.1-48.el8_10.x86_64.rpm - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

libipa_hbac-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

libmount-2.32.1-48.el8_10.x86_64.rpm - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

libnetapi-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

libnfsidmap-2.3.3-68.el8_10.x86_64.rpm - Add requires for selinux-policy (RHEL-127095)
- mountd: Minor refactor of get_rootfh() (RHEL-127095)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127095)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127095)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095)
Resolves: CVE-2025-12801
- nfsrahead: modify get_device_info logic (RHEL-108924)
- gssd: protect kerberos ticket cache access (RHEL-103627)

libpng-1.6.34-10.el8_10.x86_64.rpm - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148338)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148852)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146659)

libselinux-2.9-11.el8_10.x86_64.rpm - Ignore files removed during relabeling (RHEL-123885)

libselinux-utils-2.9-11.el8_10.x86_64.rpm - Ignore files removed during relabeling (RHEL-123885)

libsmartcols-2.32.1-48.el8_10.x86_64.rpm - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

libsmbclient-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

libsoup-2.62.3-13.el8_10.x86_64.rpm - Backport patch for CVE-2026-1761
- Backport patch for CVE-2026-0719
- Fix NTLM authentication test failures in FIPS mode

libsss_autofs-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

libsss_certmap-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

libsss_idmap-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

libsss_nss_idmap-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

libsss_sudo-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

libuuid-2.32.1-48.el8_10.x86_64.rpm - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

libwbclient-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

linux-firmware-20260112-135.git486ac8f9.el8_10.noarch.rpm - Update linux-firmware to latest upstream (RHEL-140730)
Changes since the last update are noted on items below, copied from
the git changelog of upstream linux-firmware repository.
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
Resolves: RHEL-140730

microcode_ctl-20251111-1.el8_10.x86_64.rpm - Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
- Update Intel CPU microcode to microcode-20251111 release (RHEL-128250)
- New microcode files (in hex):
06-ae-01: Granite Rapids-D: revision 1000273
- Microcode files (/platform_mask shown) with revision updates (in hex):
06-8f-07/87: Sapphire Rapids: 2b000643 to 2b000650
06-8f-08/10: Sapphire Rapids with HBM: 2c000401 to 2c000410
06-8f-08/87: Sapphire Rapids: 2b000643 to 2b000650
06-97-02/07: Alder Lake: 003a to 003d
06-97-05/07: Alder Lake: 003a to 003d
06-9a-03/80: Alder Lake-L: 0437 to 043a
06-9a-04/80: Alder Lake-L: 0437 to 043a
06-9a-04/40: Arizona Beach (Atom C11xx): 000a to 000b
06-ad-01/95: Granite Rapids-X: 10003d0 to 10003f0
06-ad-01/20: Granite Rapids-X: a000100 to a000124
06-af-03/01: Crestmont (Sierra Forest): 3000362 to 3000382
06-b7-01/32: Raptor Lake: 012f to 0132
06-ba-02/e0: Raptor Lake-P: 4129 to 6133
06-ba-03/e0: Raptor Lake-P: 4129 to 6133
06-bd-01/80: Lunar Lake: 0123 to 0125
06-be-00/19: Gracemont (Alder Lake-N): 001d to 001e
06-bf-02/07: Raptor Lake-S: 003a to 003d
06-bf-05/07: Raptor Lake-S: 003a to 003d
06-c5-02/82: Arrow Lake-H: 0119 to 011a
06-c6-02/82: Arrow Lake: 0119 to 011a
06-cf-02/87: Emerald Rapids: 210002b3 to 210002c0
- Fixes errata RPL070/ADL083/LNL047/ARL054/SPR154/EMR147:
"REP SCASB, REP CMPSB may return incorrect results when racing
memory access with another core or thread" on Raptor Lake,
Alder Lake, Lunar Lake, Arrow Lake, Sapphire Rapids, Emerald Rapids.

nfs-utils-2.3.3-68.el8_10.x86_64.rpm - Add requires for selinux-policy (RHEL-127095)
- mountd: Minor refactor of get_rootfh() (RHEL-127095)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127095)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127095)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095)
Resolves: CVE-2025-12801
- nfsrahead: modify get_device_info logic (RHEL-108924)
- gssd: protect kerberos ticket cache access (RHEL-103627)

nscd-2.28-251.el8_10.31.x86_64.rpm - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849)
- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787)
- rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889)
- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194)

nss_hesiod-2.28-251.el8_10.31.x86_64.rpm - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849)
- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787)
- rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889)
- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194)

openssl-1.1.1k-15.el8_10.x86_64.rpm - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
Resolves: RHEL-14245
- Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
Resolves: RHEL-14239
- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
Resolves: rhbz#2098279
- Fixed Timing Oracle in RSA Decryption
Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
Resolves: CVE-2023-0286
- Fix no-ec build
Resolves: rhbz#2071020
- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067145
- Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients
Resolves: RHEL-149165
Resolves: RHEL-142715
- Backport fix SSL_select_next proto from OpenSSL 3.2
Fix CVE-2024-5535
Resolves: RHEL-45654
- Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
(a proper fix for CVE-2020-25659)
Resolves: RHEL-17694
- Backport fix SSL_select_next proto from OpenSSL 3.2
Fix CVE-2024-5535
Resolves: RHEL-45654
- Bump release
- Fixed Timing Oracle in RSA Decryption
Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
Resolves: CVE-2023-0215
- Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
excessively long X9.42 DH keys or parameters may be very slow
Resolves: RHEL-16536
- Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
Fix CVE-2025-9230
Resolves: RHEL-128615
- Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap
Fix CVE-2025-9230
Resolves: RHEL-128613
- Fix bug for ticket_lifetime_hint exceed issue
Resolves: RHEL-119891
- Fixed X.400 address type confusion in X.509 GeneralName
Resolves: CVE-2023-0286

openssl-libs-1.1.1k-15.el8_10.x86_64.rpm - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
Resolves: RHEL-14245
- Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
Resolves: RHEL-14239
- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
Resolves: rhbz#2098279
- Fixed Timing Oracle in RSA Decryption
Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
Resolves: CVE-2023-0286
- Fix no-ec build
Resolves: rhbz#2071020
- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067145
- Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients
Resolves: RHEL-149165
Resolves: RHEL-142715
- Backport fix SSL_select_next proto from OpenSSL 3.2
Fix CVE-2024-5535
Resolves: RHEL-45654
- Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
(a proper fix for CVE-2020-25659)
Resolves: RHEL-17694
- Backport fix SSL_select_next proto from OpenSSL 3.2
Fix CVE-2024-5535
Resolves: RHEL-45654
- Bump release
- Fixed Timing Oracle in RSA Decryption
Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
Resolves: CVE-2023-0215
- Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
excessively long X9.42 DH keys or parameters may be very slow
Resolves: RHEL-16536
- Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
Fix CVE-2025-9230
Resolves: RHEL-128615
- Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap
Fix CVE-2025-9230
Resolves: RHEL-128613
- Fix bug for ticket_lifetime_hint exceed issue
Resolves: RHEL-119891
- Fixed X.400 address type confusion in X.509 GeneralName
Resolves: CVE-2023-0286

platform-python-3.6.8-75.el8_10.rocky.0.x86_64.rpm - Add rocky to supported dists
- Add rocky to supported dists
- Security fix for CVE-2025-0938
Resolves: RHEL-153235
- Security fix for CVE-2026-4519
Resolves: RHEL-158077
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299
Resolves: RHEL-143063, RHEL-143120, RHEL-144860
- Security fix for CVE-2025-12084
Resolves: RHEL-135911

python3-ipaclient-4.9.13-21.module+el8.10.0+40090+e6f37a74.noarch.rpm - Fix memory leaks in IPA plugins
Resolves: RHEL-145410

python3-ipalib-4.9.13-21.module+el8.10.0+40090+e6f37a74.noarch.rpm - Fix memory leaks in IPA plugins
Resolves: RHEL-145410

python3-libipa_hbac-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

python3-libs-3.6.8-75.el8_10.rocky.0.x86_64.rpm - Add rocky to supported dists
- Add rocky to supported dists
- Security fix for CVE-2025-0938
Resolves: RHEL-153235
- Security fix for CVE-2026-4519
Resolves: RHEL-158077
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299
Resolves: RHEL-143063, RHEL-143120, RHEL-144860
- Security fix for CVE-2025-12084
Resolves: RHEL-135911

python3-libselinux-2.9-11.el8_10.x86_64.rpm - Ignore files removed during relabeling (RHEL-123885)

python3-perf-4.18.0-553.115.1.el8_10.x86_64.rpm - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}
- Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
- Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
- Adding Rocky secure boot certs (Sherif Nagy)
- Fixing vmlinuz removal (Sherif Nagy)
- Fixing UEFI CA path (Sherif Nagy)
- Porting to 8.10, debranding and Rocky branding (Louis Abel)
- Fixing pesign_key_name values (Sherif Nagy)
- x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]
- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

python3-pyasn1-0.3.7-6.el8_10.1.noarch.rpm - Resolves: RHEL-148145

python3-pyasn1-modules-0.3.7-6.el8_10.1.noarch.rpm - Resolves: RHEL-148145

python3-sss-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

python3-sss-murmur-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

python3-sssdconfig-2.9.4-5.el8_10.4.noarch.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

resource-agents-4.9.0-54.el8_10.30.x86_64.rpm - bundled pyasn1: fix CVE-2026-23490
Resolves: RHEL-142448
- portblock: check inverse action state file for non-promotable
resources to avoid issues when doing e.g. block followed by unblock
Resolves: RHEL-152316
- bundled urllib3: fix issue with CVE-2026-21441 patch
Resolves: RHEL-146289

rocky-gpg-keys-8.10-1.11.el8.noarch.rpm - Update secure boot certificates

rocky-release-8.10-1.11.el8.noarch.rpm - Update secure boot certificates

rocky-repos-8.10-1.11.el8.noarch.rpm - Update secure boot certificates

samba-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-client-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-client-libs-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-common-4.19.4-15.el8_10.noarch.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-common-libs-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-common-tools-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-dcerpc-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-ldb-ldap-modules-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-libs-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-winbind-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

samba-winbind-modules-4.19.4-15.el8_10.x86_64.rpm - resolves: RHEL-132396 - Fix deadlock between two smbd processes
- resolves: RHEL-131616 - Fix regression with relative symlinks in a share
- resolves: RHEL-144390 - Fix winbind group resolution

scap-security-guide-0.1.80-1.el8_10.rocky.1.3.noarch.rpm - Make Rocky Linux a derivative of RHEL
- RHEL CIS requirement: Ensure password history is enforced for the root user is now fully covered (RHEL-125396)
- RHEL8 STIG now uses cryptography subpolicy called FIPS:STIG (RHEL-77813)
- modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL8) (RHEL-145200)
- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152058)
- Make Rocky Linux a derivative of RHEL

selinux-policy-3.14.3-139.el8_10.2.noarch.rpm - Label /etc/redis.conf with redis_conf_t
Resolves: RHEL-95750
- Allow nfsd_t domain setuid and setgid capability for rpc.mountd
Resolves: RHEL-148243

selinux-policy-devel-3.14.3-139.el8_10.2.noarch.rpm - Label /etc/redis.conf with redis_conf_t
Resolves: RHEL-95750
- Allow nfsd_t domain setuid and setgid capability for rpc.mountd
Resolves: RHEL-148243

selinux-policy-targeted-3.14.3-139.el8_10.2.noarch.rpm - Label /etc/redis.conf with redis_conf_t
Resolves: RHEL-95750
- Allow nfsd_t domain setuid and setgid capability for rpc.mountd
Resolves: RHEL-148243

sos-4.10.2-2.el8_10.noarch.rpm - Update to 4.10.2-1
Resolves: RHEL-142630
- Update to 4.10.2-2
Resolves: RHEL-142630

sssd-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-ad-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-client-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-common-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-common-pac-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-dbus-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-idp-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-ipa-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-kcm-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-krb5-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-krb5-common-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-ldap-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-nfs-idmap-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-proxy-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

sssd-tools-2.9.4-5.el8_10.4.x86_64.rpm - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

systemd-239-82.el8_10.15.x86_64.rpm - Remove support URL patch
- Disable tests due to sigabrt in our environment
- resolved: add dns_query_candidate_freep() (RHEL-93425)
- resolved: fix use-after-free with queries hitting the cache (RHEL-93425)
- resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425)
- locale-util: do not call setlocale() when multi-threaded (RHEL-93425)
- core: only activate transaction that contain useful jobs (RHEL-138710)
- Remove support URL patch

systemd-devel-239-82.el8_10.15.x86_64.rpm - Remove support URL patch
- Disable tests due to sigabrt in our environment
- resolved: add dns_query_candidate_freep() (RHEL-93425)
- resolved: fix use-after-free with queries hitting the cache (RHEL-93425)
- resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425)
- locale-util: do not call setlocale() when multi-threaded (RHEL-93425)
- core: only activate transaction that contain useful jobs (RHEL-138710)
- Remove support URL patch

systemd-libs-239-82.el8_10.15.x86_64.rpm - Remove support URL patch
- Disable tests due to sigabrt in our environment
- resolved: add dns_query_candidate_freep() (RHEL-93425)
- resolved: fix use-after-free with queries hitting the cache (RHEL-93425)
- resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425)
- locale-util: do not call setlocale() when multi-threaded (RHEL-93425)
- core: only activate transaction that contain useful jobs (RHEL-138710)
- Remove support URL patch

systemd-pam-239-82.el8_10.15.x86_64.rpm - Remove support URL patch
- Disable tests due to sigabrt in our environment
- resolved: add dns_query_candidate_freep() (RHEL-93425)
- resolved: fix use-after-free with queries hitting the cache (RHEL-93425)
- resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425)
- locale-util: do not call setlocale() when multi-threaded (RHEL-93425)
- core: only activate transaction that contain useful jobs (RHEL-138710)
- Remove support URL patch

systemd-udev-239-82.el8_10.15.x86_64.rpm - Remove support URL patch
- Disable tests due to sigabrt in our environment
- resolved: add dns_query_candidate_freep() (RHEL-93425)
- resolved: fix use-after-free with queries hitting the cache (RHEL-93425)
- resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425)
- locale-util: do not call setlocale() when multi-threaded (RHEL-93425)
- core: only activate transaction that contain useful jobs (RHEL-138710)
- Remove support URL patch

tzdata-2026a-1.el8_10.noarch.rpm - Update to tzdata-2026a (RHEL-154033)
- Correct the transition times for Moldova.
- The POSIXRULES option is now obsolete.

util-linux-2.32.1-48.el8_10.x86_64.rpm - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

util-linux-user-2.32.1-48.el8_10.x86_64.rpm - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

vim-common-8.0.1763-22.el8_10.x86_64.rpm - fix issue reported by covscan
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
- fix issue reported by covscan
- RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim

vim-enhanced-8.0.1763-22.el8_10.x86_64.rpm - fix issue reported by covscan
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
- fix issue reported by covscan
- RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim

vim-filesystem-8.0.1763-22.el8_10.noarch.rpm - fix issue reported by covscan
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
- fix issue reported by covscan
- RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim

vim-minimal-8.0.1763-22.el8_10.x86_64.rpm - fix issue reported by covscan
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read
- fix issue reported by covscan
- RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim

×

Loading...