[redhat] kernel-5.14.0-424.el9

Signed-off-by: Scott Weaver <scweaver@redhat.com>

Author: swvrrh

Makefile.rhelver

@@ -12,7 +12,7 @@ RHEL_MINOR = 4
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 423
+RHEL_RELEASE = 424
 
 #
 # ZSTREAM

redhat/kernel.changelog-9.4

@@ -1,3 +1,56 @@
+* Mon Feb 19 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-424.el9]
+- tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-21839]
+- Revert "efi/arm64: libstub: avoid SetVirtualAddressMap() when possible" (Paolo Bonzini) [RHEL-23382]
+- Revert "arm64: efi: Force the use of SetVirtualAddressMap() on Altra machines" (Paolo Bonzini) [RHEL-23382]
+- Revert "arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines" (Paolo Bonzini) [RHEL-23382]
+- Revert "arm64: efi: Use SMBIOS processor version to key off Ampere quirk" (Paolo Bonzini) [RHEL-23382]
+- Revert "efi/libstub: smbios: Drop unused 'recsize' parameter" (Paolo Bonzini) [RHEL-23382]
+- crypto: rsa - restrict plaintext/ciphertext values more (Vladis Dronov) [RHEL-24869]
+- crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-24869]
+- crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-24869]
+- dm-crypt, dm-verity: disable tasklets (Benjamin Marzinski) [RHEL-23572]
+- dm verity: initialize fec io before freeing it (Benjamin Marzinski) [RHEL-23572]
+- dm-verity: don't use blocking calls from tasklets (Benjamin Marzinski) [RHEL-23572]
+- netfilter: nf_tables: bail out on mismatching dynset and set expressions (Florian Westphal) [RHEL-19016 RHEL-19017] {CVE-2023-6622}
+- memory: tegra: Add Tegra234 clients for RCE and VI (Joel Slebodnick) [RHEL-16714]
+- cpufreq: tegra194: remove redundant AND with cpu_online_mask (Joel Slebodnick) [RHEL-16714]
+- cpufreq: tegra194: use refclk delta based loop instead of udelay (Joel Slebodnick) [RHEL-16714]
+- cpufreq: tegra194: save CPU data to avoid repeated SMP calls (Joel Slebodnick) [RHEL-16714]
+- i2c: tegra: Fix i2c-tegra DMA config option processing (Joel Slebodnick) [RHEL-16714]
+- i2c: tegra: Fix failure during probe deferral cleanup (Joel Slebodnick) [RHEL-16714]
+- firmware: tegra: bpmp: Add support for DRAM MRQ GSCs (Joel Slebodnick) [RHEL-16714]
+- gpio: tegra186: Check PMC driver status before any request (Joel Slebodnick) [RHEL-16714]
+- soc/tegra: fuse: Fix Tegra234 fuse size (Joel Slebodnick) [RHEL-16714]
+- soc/tegra: pmc: Add AON SW Wake support for Tegra234 (Joel Slebodnick) [RHEL-16714]
+- gpio: tegra186: Check GPIO pin permission before access. (Joel Slebodnick) [RHEL-16714]
+- soc/tegra: fuse: Add support for Tegra264 (Joel Slebodnick) [RHEL-16714]
+- soc/tegra: bpmp: Actually free memory on error path (Joel Slebodnick) [RHEL-16714]
+- firmware: tegra: bpmp: Fix error paths in debugfs (Joel Slebodnick) [RHEL-16714]
+- netfilter: nf_tables: check if catch-all set element is active in next generation (Florian Westphal) [RHEL-23505 RHEL-23511] {CVE-2024-1085}
+- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23502 RHEL-23508] {CVE-2024-1086}
+- RHEL: re-enable CONFIG_TCP_CONG_ILLINOIS (Davide Caratti) [RHEL-5736]
+- KVM: selftests: Fix a semaphore imbalance in the dirty ring logging test (Eric Auger) [RHEL-16671 RHEL-24620]
+- KVM: arm64: Add missing memory barriers when switching to pKVM's hyp pgd (Eric Auger) [RHEL-24620]
+- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Eric Auger) [RHEL-24620]
+- KVM: arm64: vgic-v3: Reinterpret user ISPENDR writes as I{C,S}PENDR (Eric Auger) [RHEL-24620]
+- KVM: arm64: vgic: Use common accessor for writes to ICPENDR (Eric Auger) [RHEL-24620]
+- KVM: arm64: vgic: Use common accessor for writes to ISPENDR (Eric Auger) [RHEL-24620]
+- KVM: arm64: vgic-v4: Restore pending state on host userspace write (Eric Auger) [RHEL-24620]
+- KVM: arm64: Update and fix FGT register masks (Eric Auger) [RHEL-24620]
+- IB: Use capital "OR" for multiple licenses in SPDX (Izabela Bakollari) [RHEL-10363]
+- RDMA/rdmavt: Delete unnecessary NULL check (Izabela Bakollari) [RHEL-10363]
+- IB/rdmavt: Fix target union member for rvt_post_one_wr() (Izabela Bakollari) [RHEL-10363]
+- ice: add CGU info to devlink info callback (Petr Oros) [RHEL-22620]
+- nvme: start keep-alive after admin queue setup (Maurizio Lombardi) [RHEL-25203]
+- perf list: Fix JSON segfault by setting the used skip_duplicate_pmus callback (Michael Petlan) [RHEL-17626]
+- libbpf: Use OPTS_SET() macro in bpf_xdp_query() (Viktor Malik) [RHEL-24445]
+- ovl: remove privs in ovl_fallocate() (Miklos Szeredi) [RHEL-17368]
+- ovl: remove privs in ovl_copyfile() (Miklos Szeredi) [RHEL-17368]
+- nvme-host: fix the updating of the firmware version (Maurizio Lombardi) [RHEL-25086]
+- devlink: Expose port function commands to control IPsec packet offloads (Petr Oros) [RHEL-24425]
+- devlink: Expose port function commands to control IPsec crypto offloads (Petr Oros) [RHEL-24425]
+Resolves: RHEL-10363, RHEL-16671, RHEL-16714, RHEL-17368, RHEL-17626, RHEL-19016, RHEL-21839, RHEL-22620, RHEL-23382, RHEL-23502, RHEL-23505, RHEL-23572, RHEL-24425, RHEL-24445, RHEL-24620, RHEL-24869, RHEL-25086, RHEL-25203, RHEL-5736, RHEL-19017, RHEL-23511, RHEL-23508
+
 * Fri Feb 16 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-423.el9]
 - Bluetooth: Add support for Gale Peak (8087:0036) (Jose Ignacio Tornos Martinez) [RHEL-24999]
 - Bluetooth: btintel: Add support for Gale Peak (Jose Ignacio Tornos Martinez) [RHEL-24999]