# changelog

author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.15.1.rt21.178.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.15.1.rt21.178.el9_1 [2160463]
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158815]
  - x86/fpu: Do not leak fpstate pointer on fork (Rafael Aquini) [2133083]
  - Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" (Torez Smith) [2153277]
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (David Arcari) [2162681] {CVE-2022-2873}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.16.1.rt21.179.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.16.1.rt21.179.el9_1 [2160463]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Ricardo Robaina) [2152943] {CVE-2022-3564}
  - gitlab-ci: use CI templates from production branch (Michael Hofmann)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.17.1.rt21.180.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.17.1.rt21.180.el9_1 [2160463]
  - PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155459]
  - PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459]
  - PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155459]
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459]
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155459]
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155459]
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152583] {CVE-2022-4378}
  - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152583] {CVE-2022-4378}
  - blk-mq: run queue no matter whether the request is the last request (Ming Lei) [2162535]
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Florian Westphal) [2161727] {CVE-2023-0179}
  - nvme-tcp: fix regression that causes sporadic requests to time out (Gopal Tiwari) [2161344]
  - netfs: Fix dodgy maths (Xiubo Li) [2161418]
  - netfs: Fix missing xas_retry() calls in xarray iteration (Xiubo Li) [2161418]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.18.1.rt21.181.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.18.1.rt21.181.el9_1 [2160463]
  - powerpc/pseries: Use lparcfg to reconfig VAS windows for DLPAR CPU (Steve Best) [2154305]
  - redhat/configs: Change the amd-pstate driver from builtin to loadable (David Arcari) [2151274]
  - powerpc/pseries/mobility: set NMI watchdog factor during an LPM (Steve Best) [2140085]
  - powerpc/watchdog: introduce a NMI watchdog's factor (Steve Best) [2140085]
  - watchdog: export lockup_detector_reconfigure (Steve Best) [2140085]
  - powerpc/mobility: wait for memory transfer to complete (Steve Best) [2140085]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.19.1.rt21.182.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.19.1.rt21.182.el9_1 [2170460]
  - sched/core: Use kfree_rcu() in do_set_cpus_allowed() (Waiman Long) [2160614]
  - sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Waiman Long) [2160614]
  - sched: Always clear user_cpus_ptr in do_set_cpus_allowed() (Waiman Long) [2143766]
  - sched: Enforce user requested affinity (Waiman Long) [2143766]
  - sched: Always preserve the user requested cpumask (Waiman Long) [2143766]
  - sched: Introduce affinity_context (Waiman Long) [2143766]
  - sched: Add __releases annotations to affine_move_task() (Waiman Long) [2143766]
  - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168382]
  - x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168382]
  - x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168382]
  - x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168382]
  - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168382]
  - [redhat-rt] build: adjust RTBZ for 9.1.0-z3 (Patrick Talbert)


author: Luis Claudio R. Goncalves <lgoncalv@redhat.com> [5.14.0-162.20.1.rt21.183.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.20.1.rt21.183.el9_1 [2170460]
  - cgroup/cpuset: remove unreachable code (Waiman Long) [2161105 1946801]
  - kselftest/cgroup: Add cpuset v2 partition root state test (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Update description of cpuset.cpus.partition in cgroup-v2.rst (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Make partition invalid if cpumask change violates exclusivity rule (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Relocate a code block in validate_change() (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Show invalid partition reason string (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Add a new isolated cpus.partition type (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Relax constraints to partition & cpus changes (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Allow no-task partition to have empty cpuset.cpus.effective (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Miscellaneous cleanups & add helper functions (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long) [2161105 1946801]
  - cpuset: convert 'allowed' in __cpuset_node_allowed() to be boolean (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long) [2161105 1946801]
  - cgroup: cleanup comments (Waiman Long) [2161105 1946801]
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164657 2150277] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164657 2150277] {CVE-2022-4269}
  - scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170227 2150660]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.21.1.rt21.184.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.21.1.rt21.184.el9_1 [2170460]
  - s390/boot: add secure boot trailer (Tobias Huschle) [2151528]
  - s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166903]
  - s390/qeth: cache link_info for ethtool (Tobias Huschle) [2166304]
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127880]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.22.1.rt21.185.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.22.1.rt21.185.el9_1 [2170460]
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163393] {CVE-2023-0266}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.23.1.rt21.186.el9_1]
changelog:
  - [rt] build kernel-rt-5.14.0-162.23.1.rt21.186.el9_1 [2170460]
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165353] {CVE-2023-0386}
  - intel_idle: make SPR C1 and C1E be independent (David Arcari) [2168361]
  - intel_idle: Add a new flag to initialize the AMX state (David Arcari) [2168361]
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (David Arcari) [2168361]
  - x86/insn: Add AMX instructions to the x86 instruction decoder (Michael Petlan) [2168361]
  - futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2168836]
  - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156376] {CVE-2022-4744}


