Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
62 commits
Select commit Hold shift + click to select a range
65cd7a0
Bluetooth: ISO: Fix possible UAF on iso_conn_free
PlaidCat Feb 12, 2026
9db6acd
md: call del_gendisk in control path
PlaidCat Feb 12, 2026
becf2d0
md: fix create on open mddev lifetime regression
PlaidCat Feb 12, 2026
583837c
md: Don't clear MD_CLOSING until mddev is freed
PlaidCat Feb 12, 2026
d52178b
md: add legacy_async_del_gendisk mode
PlaidCat Feb 12, 2026
579fd89
md: delete mddev kobj before deleting gendisk kobj
PlaidCat Feb 12, 2026
dae86c8
md: avoid repeated calls to del_gendisk
PlaidCat Feb 12, 2026
ff1886e
net: openvswitch: fix nested key length validation in the set() action
PlaidCat Feb 12, 2026
f478e3c
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
PlaidCat Feb 12, 2026
691bb77
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device…
PlaidCat Feb 12, 2026
d89250d
Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
PlaidCat Feb 12, 2026
0a09056
fs/proc: fix uaf in proc_readdir_de()
PlaidCat Feb 12, 2026
9295152
s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
PlaidCat Feb 12, 2026
cb4b9a5
RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
PlaidCat Feb 12, 2026
9f3ea16
usb: core: config: Prevent OOB read in SS endpoint companion parsing
PlaidCat Feb 12, 2026
94dfb77
Squashfs: check return result of sb_min_blocksize
PlaidCat Feb 12, 2026
3ac156c
squashfs: fix memory leak in squashfs_fill_super
PlaidCat Feb 12, 2026
8f44f30
nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
PlaidCat Feb 12, 2026
b8d6cfd
nvme: tcp: Fix compilation warning with W=1
PlaidCat Feb 12, 2026
b727182
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
PlaidCat Feb 12, 2026
30a676c
vsock/vmci: Clear the vmci transport packet properly when initializin…
PlaidCat Feb 12, 2026
1439e9e
net: bonding: add broadcast_neighbor option for 802.3ad
PlaidCat Feb 12, 2026
618789c
net: bonding: add broadcast_neighbor netlink option
PlaidCat Feb 12, 2026
246731b
net: bonding: update the slave array for broadcast mode
PlaidCat Feb 12, 2026
741de61
neigh: introduce neigh_confirm() helper function
PlaidCat Feb 12, 2026
59a08fc
ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh()
PlaidCat Feb 12, 2026
fe9effc
ipv6: flowlabel: do not disable BH where not needed
PlaidCat Feb 12, 2026
ea423f8
neighbour: switch to standard rcu, instead of rcu_bh
PlaidCat Feb 12, 2026
2df5495
net: remove rcu_dereference_bh_rtnl()
PlaidCat Feb 12, 2026
67cb13d
ipv6: remove nexthop_fib6_nh_bh()
PlaidCat Feb 12, 2026
52affda
vrf: Fix lockdep splat in output path
PlaidCat Feb 12, 2026
6895871
bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
PlaidCat Feb 12, 2026
d1d52af
net: dst: add four helpers to annotate data-races around dst->dev
PlaidCat Feb 12, 2026
9fcd252
net: Add locking to protect skb->dev access in ip_output
PlaidCat Feb 12, 2026
6f13612
ipv4: use RCU protection in __ip_rt_update_pmtu()
PlaidCat Feb 12, 2026
2e41068
net: dst: introduce dst->dev_rcu
PlaidCat Feb 12, 2026
650c6cf
ipv6: use RCU in ip6_output()
PlaidCat Feb 12, 2026
129e5c0
ipv6: use RCU in ip6_xmit()
PlaidCat Feb 12, 2026
c3ec0f9
net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward
PlaidCat Feb 12, 2026
0566e37
ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
PlaidCat Feb 12, 2026
47e391b
net: use dst_dev_rcu() in sk_setup_caps()
PlaidCat Feb 12, 2026
193b5fa
dpll: remove documentation of rclk_dev_name
PlaidCat Feb 12, 2026
f7ce4d2
dpll: add reference-sync netlink attribute
PlaidCat Feb 12, 2026
cda26db
dpll: add reference sync get/set
PlaidCat Feb 12, 2026
e8b8f0d
dpll: fix clock quality level reporting
PlaidCat Feb 12, 2026
2fb0901
dpll: add phase-offset-avg-factor device attribute to netlink spec
PlaidCat Feb 12, 2026
36f33b5
dpll: add phase_offset_avg_factor_get/set callback ops
PlaidCat Feb 12, 2026
8f0da27
dpll: zl3073x: Allow to configure phase offset averaging factor
PlaidCat Feb 12, 2026
8745cf6
dpll: spec: add missing module-name and clock-id to pin-get reply
PlaidCat Feb 12, 2026
c622261
dpll: fix device-id-get and pin-id-get to return errors properly
PlaidCat Feb 12, 2026
18f7219
dpll: zl3073x: Store raw register values instead of parsed state
PlaidCat Feb 12, 2026
3d4cdf5
dpll: zl3073x: Split ref, out, and synth logic from core
PlaidCat Feb 12, 2026
66d5db5
dpll: zl3073x: Cache reference monitor status
PlaidCat Feb 12, 2026
3dde87a
dpll: zl3073x: Cache all reference properties in zl3073x_ref
PlaidCat Feb 12, 2026
4be90a2
dpll: zl3073x: Cache all output properties in zl3073x_out
PlaidCat Feb 12, 2026
8bab98b
dpll: zl3073x: Remove unused dev wrappers
PlaidCat Feb 12, 2026
7fa119d
atm: clip: Fix infinite recursive call of clip_push().
PlaidCat Feb 12, 2026
12eb0a5
net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
PlaidCat Feb 12, 2026
52538f5
io_uring/kbuf: use 'bl' directly rather than req->buf_list
PlaidCat Feb 12, 2026
76469aa
io_uring/kbuf: add io_kbuf_commit() helper
PlaidCat Feb 12, 2026
c291959
io_uring/net: commit partial buffers on retry
PlaidCat Feb 12, 2026
0384556
Rebuild rocky9_7 with kernel-5.14.0-611.30.1.el9_7
PlaidCat Feb 12, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
File renamed without changes.
43 changes: 42 additions & 1 deletion Documentation/driver-api/dpll.rst
Original file line number Diff line number Diff line change
Expand Up @@ -179,7 +179,23 @@ Phase offset measurement and adjustment
Device may provide ability to measure a phase difference between signals
on a pin and its parent dpll device. If pin-dpll phase offset measurement
is supported, it shall be provided with ``DPLL_A_PIN_PHASE_OFFSET``
attribute for each parent dpll device.
attribute for each parent dpll device. The reported phase offset may be
computed as the average of prior values and the current measurement, using
the following formula:

.. math::
curr\_avg = prev\_avg * \frac{2^N-1}{2^N} + new\_val * \frac{1}{2^N}

where `curr_avg` is the current reported phase offset, `prev_avg` is the
previously reported value, `new_val` is the current measurement, and `N` is
the averaging factor. Configured averaging factor value is provided with
``DPLL_A_PHASE_OFFSET_AVG_FACTOR`` attribute of a device and value change can
be requested with the same attribute with ``DPLL_CMD_DEVICE_SET`` command.

================================== ======================================
``DPLL_A_PHASE_OFFSET_AVG_FACTOR`` attr configured value of phase offset
averaging factor
================================== ======================================

Device may also provide ability to adjust a signal phase on a pin.
If pin phase adjustment is supported, minimal and maximal values and
Expand Down Expand Up @@ -255,6 +271,31 @@ the pin.
``DPLL_A_PIN_ESYNC_PULSE`` pulse type of Embedded SYNC
========================================= =================================

Reference SYNC
==============

The device may support the Reference SYNC feature, which allows the combination
of two inputs into a input pair. In this configuration, clock signals
from both inputs are used to synchronize the DPLL device. The higher frequency
signal is utilized for the loop bandwidth of the DPLL, while the lower frequency
signal is used to syntonize the output signal of the DPLL device. This feature
enables the provision of a high-quality loop bandwidth signal from an external
source.

A capable input provides a list of inputs that can be bound with to create
Reference SYNC. To control this feature, the user must request a desired
state for a target pin: use ``DPLL_PIN_STATE_CONNECTED`` to enable or
``DPLL_PIN_STATE_DISCONNECTED`` to disable the feature. An input pin can be
bound to only one other pin at any given time.

============================== ==========================================
``DPLL_A_PIN_REFERENCE_SYNC`` nested attribute for providing info or
requesting configuration of the Reference
SYNC feature
``DPLL_A_PIN_ID`` target pin id for Reference SYNC feature
``DPLL_A_PIN_STATE`` state of Reference SYNC connection
============================== ==========================================

Configuration commands group
============================

Expand Down
26 changes: 26 additions & 0 deletions Documentation/netlink/specs/dpll.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -315,6 +315,10 @@ attribute-sets:
If enabled, dpll device shall monitor and notify all currently
available inputs for changes of their phase offset against the
dpll device.
-
name: phase-offset-avg-factor
type: u32
doc: Averaging factor applied to calculation of reported phase offset.
-
name: pin
enum-name: dpll_a_pin
Expand Down Expand Up @@ -428,6 +432,14 @@ attribute-sets:
doc: |
A ratio of high to low state of a SYNC signal pulse embedded
into base clock frequency. Value is in percents.
-
name: reference-sync
type: nest
multi-attr: true
nested-attributes: reference-sync
doc: |
Capable pin provides list of pins that can be bound to create a
reference-sync pin pair.
-
name: phase-adjust-gran
type: u32
Expand Down Expand Up @@ -465,6 +477,14 @@ attribute-sets:
name: frequency-min
-
name: frequency-max
-
name: reference-sync
subset-of: pin
attributes:
-
name: id
-
name: state

operations:
enum-name: dpll_cmd
Expand Down Expand Up @@ -513,6 +533,7 @@ operations:
- clock-id
- type
- phase-offset-monitor
- phase-offset-avg-factor

dump:
reply: *dev-attrs
Expand All @@ -530,6 +551,7 @@ operations:
attributes:
- id
- phase-offset-monitor
- phase-offset-avg-factor
-
name: device-create-ntf
doc: Notification about device appearing
Expand Down Expand Up @@ -589,6 +611,8 @@ operations:
reply: &pin-attrs
attributes:
- id
- module-name
- clock-id
- board-label
- panel-label
- package-label
Expand All @@ -606,6 +630,7 @@ operations:
- esync-frequency
- esync-frequency-supported
- esync-pulse
- reference-sync

dump:
request:
Expand Down Expand Up @@ -633,6 +658,7 @@ operations:
- parent-pin
- phase-adjust
- esync-frequency
- reference-sync
-
name: pin-create-ntf
doc: Notification about pin appearing
Expand Down
6 changes: 6 additions & 0 deletions Documentation/networking/bonding.rst
Original file line number Diff line number Diff line change
Expand Up @@ -550,6 +550,12 @@ lacp_rate

The default is slow.

broadcast_neighbor

Option specifying whether to broadcast ARP/ND packets to all
active slaves. This option has no effect in modes other than
802.3ad mode. The default is off (0).

max_bonds

Specifies the number of bonding devices to create for this
Expand Down
2 changes: 1 addition & 1 deletion Makefile.rhelver
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ RHEL_MINOR = 7
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 611.27.1
RHEL_RELEASE = 611.30.1

#
# ZSTREAM
Expand Down
1 change: 0 additions & 1 deletion arch/s390/Kconfig
Original file line number Diff line number Diff line change
Expand Up @@ -134,7 +134,6 @@ config S390
select ARCH_WANT_IPC_PARSE_VERSION
select ARCH_WANT_KERNEL_PMD_MKWRITE
select ARCH_WANT_LD_ORPHAN_WARN
select ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
select BUILDTIME_TABLE_SORT
select CLONE_BACKWARDS2
select DCACHE_WORD_ACCESS if !KMSAN
Expand Down
11 changes: 11 additions & 0 deletions arch/s390/mm/hugetlbpage.c
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,17 @@
#include <linux/mman.h>
#include <linux/sched/mm.h>
#include <linux/security.h>
#include <linux/jump_label.h>

/*
* RHEL-only: Since the 'hugetlb_optimize_vmemmap_key' static key is part
* of the kABI, we need stub definitions to avoid breaking the build
* when CONFIG_ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP=n.
*/
#ifndef CONFIG_ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
DEFINE_STATIC_KEY_FALSE(hugetlb_optimize_vmemmap_key);
EXPORT_SYMBOL(hugetlb_optimize_vmemmap_key);
#endif

/*
* If the bit selected by single-bit bitmask "a" is set within "x", move
Expand Down
48 changes: 48 additions & 0 deletions ciq/ciq_backports/kernel-5.14.0-611.30.1.el9_7/071d8012.failed
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
ipv4: use RCU protection in ip_dst_mtu_maybe_forward()

jira KERNEL-619
Rebuild_History Non-Buildable kernel-5.14.0-611.30.1.el9_7
commit-author Eric Dumazet <edumazet@google.com>
commit 071d8012869b6af352acca346ade13e7be90a49f
Empty-Commit: Cherry-Pick Conflicts during history rebuild.
Will be included in final tarball splat. Ref for failed cherry-pick at:
ciq/ciq_backports/kernel-5.14.0-611.30.1.el9_7/071d8012.failed

ip_dst_mtu_maybe_forward() must use RCU protection to make
sure the net structure it reads does not disappear.

Fixes: f87c10a8aa1e8 ("ipv4: introduce ip_dst_mtu_maybe_forward and protect forwarding path against pmtu spoofing")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Link: https://patch.msgid.link/20250205155120.1676781-4-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
(cherry picked from commit 071d8012869b6af352acca346ade13e7be90a49f)
Signed-off-by: Jonathan Maple <jmaple@ciq.com>

# Conflicts:
# include/net/ip.h
diff --cc include/net/ip.h
index f98661f56cbd,ba7b43447775..000000000000
--- a/include/net/ip.h
+++ b/include/net/ip.h
@@@ -443,10 -470,13 +443,19 @@@ static inline bool ip_sk_ignore_df(cons
static inline unsigned int ip_dst_mtu_maybe_forward(const struct dst_entry *dst,
bool forwarding)
{
++<<<<<<< HEAD
+ const struct rtable *rt = container_of(dst, struct rtable, dst);
+ struct net *net = dev_net(dst->dev);
+ unsigned int mtu;
++=======
+ const struct rtable *rt = dst_rtable(dst);
+ unsigned int mtu, res;
+ struct net *net;
++>>>>>>> 071d8012869b (ipv4: use RCU protection in ip_dst_mtu_maybe_forward())

+ rcu_read_lock();
+
+ net = dev_net_rcu(dst->dev);
if (READ_ONCE(net->ipv4.sysctl_ip_fwd_use_pmtu) ||
ip_mtu_locked(dst) ||
!forwarding) {
* Unmerged path include/net/ip.h
Loading