# changelog

author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.32.1.el8_6]
changelog:
  - net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131936 2130839]
  - net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131936 2130839]
  - configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2129923 2123508]
  - drm/nouveau: recognise GA103 (Karol Herbst) [2127122 1923125]
  - net: fix a memleak when uncloning an skb dst and its metadata (Hangbin Liu) [2131255 2068355]
  - net: do not keep the dst cache when uncloning an skb dst and its metadata (Hangbin Liu) [2131255 2068355]
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/spec_ctrl: Enable RHEL only ibrs_always & retpoline,ibrs_user spectre_v2 options (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: emulate: do not adjust size of fastop and setcc subroutines (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - efi/x86: use naked RET on mixed mode call wrapper (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Remove apostrophe typo (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/entry: Remove UNTRAIN_RET from native_irq_return_ldt (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Mark retbleed_strings static (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Disable RRSBA behavior (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kexec: Disable RET on kexec (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - redhat/configs: Add new mitigation configs for RetBleed CVEs (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/retbleed: Add fine grained Kconfig knobs (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpu/amd: Enumerate BTC_NO (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/common: Stamp out the stepping madness (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Prevent RSB underflow before vmenter (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Fill RSB on vmexit for IBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Fix IBRS handling after vmexit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Convert launched argument to flags (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Flatten __vmx_vcpu_run() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Remove x86_spec_ctrl_mask (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Fix SPEC_CTRL write on SMT state change (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Fix firmware entry SPEC_CTRL handling (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpu/amd: Add Spectral Chicken (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Do IBPB fallback check only once (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Add retbleed=ibpb (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Update Retpoline validation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - intel_idle: Disable IBRS during long idle (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Report Intel retbleed vulnerability (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Optimize SPEC_CTRL MSR writes (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/entry: Add kernel IBRS implementation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Enable STIBP for JMP2RET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Add AMD retbleed= boot parameter (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Report AMD retbleed vulnerability (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Add magic AMD return-thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Use return-thunk in asm code (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/sev: Avoid using __x86_return_thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kvm: Fix SETcc emulation for return thunks (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bpf: Use alternative RET encoding (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Use alternative RET encoding (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86,objtool: Create .return_sites (Josh Poimboeuf) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Undo return-thunk damage (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/retpoline: Use -mfunction-return (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/retpoline: Swizzle retpoline thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/retpoline: Cleanup some #ifdefery (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpufeatures: Move RETPOLINE flags to word 11 (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kvm/vmx: Make noinstr clean (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - arch/x86/boot/compressed: Add -D__DISABLE_EXPORTS to kbuild flags (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: (Ab)use __DISABLE_EXPORTS to disable RETHUNK in real mode (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/entry: Remove skip_r11rcx (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation/srbds: Do not try to turn mitigation off when not supported (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/module: Fix the paravirt vs alternative order (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Add straight-line-speculation mitigation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Prepare inline-asm for straight-line-speculation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Prepare asm files for straight-line-speculation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Move RETPOLINE*_CFLAGS to arch Makefile (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - Makefile: remove stale cc-option checks (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - tools headers: Remove broken definition of __LITTLE_ENDIAN (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Add insn_decode_kernel() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - tools/insn: Restore the relative include paths for cross building (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Use insn_decode() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/insn: Add an insn_decode() API (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/insn: Rename insn_decode() to insn_decode_from_regs() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Add new features for paravirt patching (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Support not-feature (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Merge include files (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Fix error handling for STD/CLD warnings (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Teach text_poke_bp() to emulate RET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Have ftrace trampolines turn read-only at the end of system boot up (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Add support for intra-function calls (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Rework allocating stack_ops on decode (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Better handle IRET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Support multiple stack_op per instruction (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Make BP scratch register warning more robust (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kexec: Make relocate_kernel_64.S objtool clean (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Introduce validate_return() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - Makefile: disallow data races on gcc-10 as well (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Improve call destination function detection (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Implement a better poke_int3_handler() completion scheme (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - lib/: fix Kconfig indentation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Use INT3_INSN_SIZE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kprobes: Fix ordering while text-patching (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kprobes: Convert to text-patching.h (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Shrink text_poke_loc (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Remove text_poke_loc::len (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Use text_gen_insn() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Add text_opcode_size() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Use text_poke() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Use vmalloc special flag (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Explicitly include vmalloc.h for set_vm_flush_reset_perms() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Add and use text_gen_insn() helper (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives, jump_label: Provide better text_poke() batching interface (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/asm: Annotate relocate_kernel_{32,64}.c (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: kprobes: Prohibit probing on instruction which has emulate prefix (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Correct misc typos (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation/mds: Apply more accurate check on hypervisor platform (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Convert insn type to enum (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Track original function across branches (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Make enable parameter bool where applicable (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Fix function fallthrough detection (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Detect over-sized patching bugs in paravirt_patch_call() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpu/amd: Exclude 32bit only assembler from 64bit build (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/asm: Mark all top level asm statements as .text (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpu/bugs: Use __initconst for 'const' init data (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Add Direction Flag validation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Rewrite add_ignores() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/nospec, objtool: Introduce ANNOTATE_IGNORE_ALTERNATIVE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - kbuild: Disable extra debugging info in .s output (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/CPU/AMD: Set the CPB bit unconditionally on F17h (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Print containing function (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Do not call function graph from dynamic trampolines (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - ftrace: Create new ftrace_internal.h header (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - kprobes/x86: Fix instruction patching corruption when copying more than one RIP-relative instruction (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - tracing/Makefile: Fix handling redefinition of CC_FLAGS_FTRACE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Remove unused paravirt bits (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Remove clobbers parameter from paravirt patch functions (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Make paravirt_patch_call() and paravirt_patch_jmp() static (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - ftrace: Remove unused pointer ftrace_swapper_pid (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/spec_ctrl: Temporarily remove RHEL specific IBRS code (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - intel_idle: enable interrupts before C1 on Xeons (Steve Best) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Vitaly Kuznetsov) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - atlantic: Fix issue in the pm resume flow. (Igor Russkikh) [2127845 2002395]
  - atlantic: Fix driver resume flow. (Igor Russkikh) [2127845 2002395]
  - net: atlantic: always deep reset on pm op, fixing up my null deref regression (Foggy Liu) [2124966 2039680]
  - net: atlantic: invert deep par in pm functions, preventing null derefs (Foggy Liu) [2124966 2039680]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.33.1.el8_6]
changelog:
  - Documentation: add documentation for force_cgroup_v2_swappiness control (Nico Pache) [2133831 2084242]
  - Introduce force_cgroup_v2_swappiness tuneable to deprecate cgv1 per-cgroup swappiness (Nico Pache) [2133831 2084242]
  - random: allow reseeding DRBG with getrandom (Daiki Ueno) [2129728 2121766]
  - virtio-net: support XDP when not more queues (Eugenio Pérez) [2131740 2122225]
  - virtio_net: Don't process redirected XDP frames when XDP is disabled (Eugenio Pérez) [2131740 2122225]
  - virtio_net: Fix not restoring real_num_rx_queues (Eugenio Pérez) [2131740 2122225]
  - KVM: SVM: fix tsc scaling cache logic (Vitaly Kuznetsov) [2125671 2115240]
  - KVM: x86: SVM: add module param to control TSC scaling (Vitaly Kuznetsov) [2125671 2115240]
  - KVM: x86: SVM: add module param to control LBR virtualization (Vitaly Kuznetsov) [2125671 2115240]
  - nvme-multipath: set ana_log_size to 0 after free ana_log_buf (Gopal Tiwari) [2132555 2078806]
  - sched: Add WARN_ONCE_SAFE for use during critical scheduler code. (Phil Auld) [2125422 2095898]
  - printk: remove NMI tracking [partial] (Phil Auld) [2125422 2095898]
  - x86: intel_epb: Allow model specific normal EPB value (Prarit Bhargava) [2102103 2101488]
  - x86: intel_epb: Do not build when CONFIG_PM is unset (Prarit Bhargava) [2102103 2101488]
  - x86: intel_epb: Take CONFIG_PM into account (Prarit Bhargava) [2102103 2101488]
  - PM / arch: x86: MSR_IA32_ENERGY_PERF_BIAS sysfs interface (Prarit Bhargava) [2102103 2101488]
  - PM / arch: x86: Rework the MSR_IA32_ENERGY_PERF_BIAS handling (Prarit Bhargava) [2102103 2101488]
  - KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled (Dr. David Alan Gilbert) [2131756 2079311]
  - KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES (Dr. David Alan Gilbert) [2131756 2079311]
  - KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0 (Dr. David Alan Gilbert) [2131756 2079311]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.34.1.el8_6]
changelog:
  - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Jon Maloy) [2122537 2122538] {CVE-2022-1158}
  - block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135814 2131929]
  - ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130993 2129902]
  - ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130993 2129902]
  - ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130993 2129902]
  - ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130993 2129902]
  - ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130993 2129902]
  - ice: Fix switchdev rules book keeping (Petr Oros) [2130993 2129902]
  - ice: fix access-beyond-end in the switch code (Petr Oros) [2130993 2129902]
  - eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130993 2129902]
  - ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130993 2129902]
  - Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2130993 2129902]
  - ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130993 2129902]
  - ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130993 2129902]
  - ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130993 2129902]
  - ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130993 2129902]
  - ice: always check VF VSI pointer values (Petr Oros) [2130993 2129902]
  - ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130993 2129902]
  - ice: get switch id on switchdev devices (Petr Oros) [2130993 2129902]
  - ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130993 2129902]
  - ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130993 2129902]
  - ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130993 2129902]
  - ice: Add mpls+tso support (Petr Oros) [2130993 2129902]
  - ice: switch: convert packet template match code to rodata (Petr Oros) [2130993 2129902]
  - ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130993 2129902]
  - ice: switch: use a struct to pass packet template params (Petr Oros) [2130993 2129902]
  - ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130993 2129902]
  - ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130993 2129902]
  - ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130993 2129902]
  - ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130993 2129902]
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127850 2121089]
  - crypto: fips - make proc files report fips module name and version (Vladis Dronov) [2136540 2103966]
  - crypto: ecdh - disallow plain "ecdh" usage in FIPS mode (Vladis Dronov) [2136525 2129392]
  - crypto: dh - disallow plain "dh" usage in FIPS mode (Vladis Dronov) [2136525 2129392]
  - ice: Fix VF not able to send tagged traffic with no VLAN filters (Petr Oros) [2136043 2055446]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.35.1.el8_6]
changelog:
  - certs: Move load_certificate_list() to be with the asymmetric keys code (Vladis Dronov) [2137316 2134828]
  - certs: Add FIPS selftests (Vladis Dronov) [2137316 2134828]
  - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (other cases) (Jose Ignacio Tornos Martinez) [2112264 2086480]
  - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (Jose Ignacio Tornos Martinez) [2112264 2086480]
  - vfio/type1: Unpin zero pages (Alex Williamson) [2128516 2123015]
  - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2134089 2047366]
  - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2134089 2047366]
  - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2134089 2047366]
  - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2134089 2047366]
  - netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2134089 2047366]
  - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2134089 2047366]
  - netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2134089 2047366]
  - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2134089 2047366]
  - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2134089 2047366]
  - ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136217 2024110]
  - wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138954 2125233]
  - ethtool: Fix get module eeprom fallback (Ivan Vecera) [2139638 2091772]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.36.1.el8_6]
changelog:
  - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139217 2134535]
  - panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139581 2134126]
  - kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139581 2134126]
  - kexec: move locking into do_kexec_load (Valentin Schneider) [2139581 2134126]
  - openvswitch: fix OOB access in reserve_sfa_size() (Antoine Tenart) [2096537 2141664] {CVE-2022-2639}
  - ice: Add support Flex RXD (Michal Schmidt) [2138158 2131310]
  - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito) [2140144 2127128]
  - ice: Add low latency Tx timestamp read (Petr Oros) [2136037 2092425]
  - ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136037 2092425]
  - ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136037 2092425]
  - ice: track and warn when PHC update is late (Petr Oros) [2136037 2092425]
  - ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136037 2092425]
  - ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136037 2092425]
  - ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136037 2092425]
  - math: Export mul_u64_u64_div_u64 (Petr Oros) [2136037 2092425]
  - ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136514 2131024]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.37.1.el8_6]
changelog:
  - KVM: VMX: Dont' send posted IRQ if vCPU == this vCPU and vCPU is IN_GUEST_MODE (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: VMX: Fold fallback path into triggering posted IRQ helper (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: VMX: Pass desired vector instead of bool for triggering posted IRQ (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: VMX: Don't do full kick when triggering posted interrupt "fails" (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: nVMX: Ensure vCPU honors event request if posting nested IRQ fails (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: x86: Use a stable condition around all VT-d PI paths (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: x86: check PIR even for vCPUs with disabled APICv (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled (Vitaly Kuznetsov) [2139803 2074835]
  - KVM: x86: ignore APICv if LAPIC is not enabled (Vitaly Kuznetsov) [2139803 2074835]
  - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (Desnes A. Nunes do Rosario) [2137495 2095041]
  - RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141958 2077119]
  - net/xfrm: IPsec tunnel mode fix inner_ipproto setting in sec_path (Sabrina Dubroca) [2139112 2107200]
  - crypto: qat - add limit to linked list parsing (Vladis Dronov) [2133748 2129897]
  - crypto: qat - use reference to structure in dma_map_single() (Vladis Dronov) [2133748 2129897]
  - Revert "crypto: qat - reduce size of mapped region" (Vladis Dronov) [2133748 2129897]
  - crypto: qat - fix DMA transfer direction (Vladis Dronov) [2133748 2129897]
  - crypto: qat - fix default value of WDT timer (Vladis Dronov) [2133748 2129897]
  - crypto: drivers - move from strlcpy with unused retval to strscpy (Vladis Dronov) [2133748 2129897]
  - crypto: qat - add check to validate firmware images (Vladis Dronov) [2133748 2129897]
  - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (Vladis Dronov) [2133748 2129897]
  - crypto: qat - add param check for DH (Vladis Dronov) [2133748 2129897]
  - crypto: qat - add param check for RSA (Vladis Dronov) [2133748 2129897]
  - crypto: qat - remove dma_free_coherent() for DH (Vladis Dronov) [2133748 2129897]
  - crypto: qat - remove dma_free_coherent() for RSA (Vladis Dronov) [2133748 2129897]
  - crypto: qat - fix memory leak in RSA (Vladis Dronov) [2133748 2129897]
  - crypto: qat - add backlog mechanism (Vladis Dronov) [2133748 2129897]
  - crypto: qat - refactor submission logic (Vladis Dronov) [2133748 2129897]
  - crypto: qat - use pre-allocated buffers in datapath (Vladis Dronov) [2133748 2129897]
  - crypto: qat - set to zero DH parameters before free (Vladis Dronov) [2133748 2129897]
  - crypto: qat - set COMPRESSION capability for DH895XCC (Vladis Dronov) [2133748 2129897]
  - crypto: qat - set CIPHER capability for DH895XCC (Vladis Dronov) [2133748 2129897]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.38.1.el8_6]
changelog:
  - redhat: update ppc64le secureboot signing key (Jarod Wilson) [2139633 2109215]
  - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134085 2131370]
  - netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134085 2131370]
  - netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134085 2131370]
  - netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134085 2131370]
  - ice: virtchnl rss hena support (Petr Oros) [2148131 2136516]
  - ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142018 2137378]
  - net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141879 2131361]
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137271 2106964]
  - i40e: Fix VF set max MTU size (Petr Oros) [2137271 2106964]
  - iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137271 2106964]
  - iavf: Fix bad page state (Petr Oros) [2137271 2106964]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.39.1.el8_6]
changelog:
  - mei: me: add adler lake point S DID (Prarit Bhargava) [2141784 2141602]
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Waiman Long) [2120609 2101938]
  - Drivers: hv: balloon: account for vmbus packet header in max_pkt_size (Mohammed Gamal) [2144495 2086613]
  - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2151615 2074835]
  - iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149082 2134005]
  - iavf: Fix a crash during reset task (Petr Oros) [2149082 2134005]
  - iavf: Detach device during reset task (Petr Oros) [2149879 2069206]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.40.1.el8_6]
changelog:
  - net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141960 2131345]
  - crypto: testmgr - disallow plain cbcmac(aes) and ghash in FIPS mode (Vladis Dronov) [2139703 2107595]
  - crypto: set the required FIPS_INTERNAL flag for gcm and ccm (Vladis Dronov) [2139703 2107595]
  - crypto: seqiv - flag instantiations as FIPS compliant (Vladis Dronov) [2139703 2107595]
  - crypto: xts - restrict key lengths to approved values in FIPS mode (Vladis Dronov) [2139703 2107595]
  - crypto: api - allow algs only in specific constructions in FIPS mode (Vladis Dronov) [2139703 2107595]
  - crypto: api - check for ERR pointers in crypto_destroy_tfm() (Vladis Dronov) [2139703 2107595]
  - crypto: api - Fix use-after-free and race in crypto_spawn_alg (Vladis Dronov) [2139703 2107595]
  - crypto: algapi - Avoid spurious modprobe on LOADED (Vladis Dronov) [2139703 2107595]
  - crypto: api - Retain alg refcount in crypto_grab_spawn (Vladis Dronov) [2139703 2107595]
  - crypto: api - Do not zap spawn->alg (Vladis Dronov) [2139703 2107595]
  - crypto: api - Fix race condition in crypto_spawn_alg (Vladis Dronov) [2139703 2107595]
  - crypto: api - Check spawn->alg under lock in crypto_drop_spawn (Vladis Dronov) [2139703 2107595]
  - crypto: algapi - reject NULL crypto_spawn::inst (Vladis Dronov) [2139703 2107595]
  - vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152913 2145136]
  - iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149743 2103944]
  - iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149743 2103944]
  - net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149743 2103944]
  - iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149743 2103944]
  - iavf: Fix max_rate limiting (Stefan Assmann) [2149743 2103944]
  - iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149743 2103944]
  - iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149743 2103944]
  - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149743 2103944]
  - intel/iavf:fix repeated words in comments (Stefan Assmann) [2149743 2103944]
  - intel: remove unused macros (Stefan Assmann) [2149743 2103944]
  - cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153109 2149031]
  - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153109 2149031]
  - rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153109 2149031]
  - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153109 2149031]
  - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153109 2149031]
  - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock (Waiman Long) [2153109 2149031]
  - rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153109 2149031]
  - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153109 2149031]
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153109 2149031]
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock (Waiman Long) [2153109 2149031]
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153109 2149031]
  - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153109 2149031]
  - cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153109 2149031]
  - cgroup: no need for cgroup_mutex for /proc/cgroups (Waiman Long) [2153109 2149031]
  - cgroup: remove cgroup_mutex from cgroupstats_build (Waiman Long) [2153109 2149031]
  - cgroup: disable controllers at parse time (Waiman Long) [2143486 2098264]
  - init: initialize jump labels before command line option parsing (Waiman Long) [2143486 2098264]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.41.1.el8_6]
changelog:
  - x86/speculation: Add LFENCE to RSB fill sequence (Waiman Long) [2115079 2115080] {CVE-2022-26373}
  - x86/speculation: Add RSB VM Exit protections (Waiman Long) [2115079 2115080] {CVE-2022-26373}
  - tools headers cpufeatures: Sync with the kernel sources (Waiman Long) [2115079 2115080] {CVE-2022-26373}
  - tools headers cpufeatures: Sync with the kernel sources (Waiman Long) [2115079 2115080] {CVE-2022-26373}
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n (Waiman Long) [2115079 2115080] {CVE-2022-26373}
  - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Waiman Long) [2115079 2115080] {CVE-2022-26373}
  - x86/amd: Use IBPB for firmware calls (Waiman Long) [2115079 2115080] {CVE-2022-26373}
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts (Waiman Long) [2115079 2115080] {CVE-2022-26373}
  - Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (Mohammed Gamal) [2155281 2144708]
  - PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155281 2144708]
  - PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155281 2144708]
  - Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (Mohammed Gamal) [2155281 2144708]
  - Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (Mohammed Gamal) [2155281 2144708]
  - Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (Mohammed Gamal) [2155281 2144708]
  - PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155281 2144708]
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148148 2148150] {CVE-2022-4139}
  - hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155273 2149279]


author: Bruno Meneguele <bmeneg@redhat.com> - 20210702-103.gitd79c2677
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
  - Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
  - Package the new iwl7260 ucode files and also the new binary format PNVM


author: Bruno Meneguele <bmeneg@redhat.com> - 20211007-104.git7a300505
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
  - Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
  - Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)


author: Bruno Meneguele <bmeneg@redhat.com> - 20211119-105.gitf5d51956
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update to latest AMD GPU firmware (rhbz 1986660)


author: Augusto Caringi <acaringi@redhat.com> - 20220209-106.git6342082c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include AMD GPU firmware fix (rhbz 2031172)
  - Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)


author: Augusto Caringi <acaringi@redhat.com> - 20220210-110.git6342082c
changelog:
  - Update AMD fam17h cpu microcode (microcode_amd_fam17h.bin)
  - Update AMD fam19h cpu microcode (microcode_amd_fam19h.bin)
  - Fixes rhbz 2227151 (CVE-2023-20593)


