[redhat] kernel-6.12.0-148.el10

Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>

Author: CKI KWF Bot

Makefile.rhelver

@@ -12,7 +12,7 @@ RHEL_MINOR = 2
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 147
+RHEL_RELEASE = 148
 
 #
 # RHEL_REBASE_NUM

redhat/kernel.changelog-10.2

@@ -1,3 +1,71 @@
+* Wed Oct 29 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-148.el10]
+- vrf: Drop existing dst reference in vrf_ip6_input_dst (Antoine Tenart) [RHEL-115588]
+- redhat/kernel.spec: make python3-perf glob more specific (Jan Stancek) [RHEL-119658]
+- net/packet: fix a race in packet_set_ring() and packet_notifier() (Davide Caratti) [RHEL-115601]
+- af_packet: fix soft lockup issue caused by tpacket_snd() (Davide Caratti) [RHEL-115601]
+- af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Davide Caratti) [RHEL-115601]
+- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Davide Caratti) [RHEL-115601]
+- net: loopback: Avoid sending IP packets without an Ethernet header (Davide Caratti) [RHEL-115601]
+- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-115581]
+- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-115581]
+- xfrm: Skip redundant statistics update for crypto offload (Sabrina Dubroca) [RHEL-115581]
+- xfrm: use kfree_sensitive() for SA secret zeroization (Sabrina Dubroca) [RHEL-115581]
+- espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca) [RHEL-115581]
+- espintcp: fix skb leaks (Sabrina Dubroca) [RHEL-115581]
+- xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46] (Sabrina Dubroca) [RHEL-115581]
+- tracing: Silence warning when chunk allocation fails in trace_pid_write (Jerome Marchand) [RHEL-115358] {CVE-2025-39914}
+- trace/fgraph: Fix error handling (Jerome Marchand) [RHEL-115358]
+- ftrace: Also allocate and copy hash for reading of filter files (Jerome Marchand) [RHEL-115358] {CVE-2025-39689}
+- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Jerome Marchand) [RHEL-115358] {CVE-2025-39813}
+- tracing: Fix tracing_marker may trigger page fault during preempt_disable (Jerome Marchand) [RHEL-115358]
+- trace/fgraph: Fix the warning caused by missing unregister notifier (Jerome Marchand) [RHEL-115358] {CVE-2025-39829}
+- tracing: fprobe-event: Sanitize wildcard for fprobe event name (Jerome Marchand) [RHEL-115358]
+- tracing: Limit access to parser->buffer when trace_get_user failed (Jerome Marchand) [RHEL-115358] {CVE-2025-39683}
+- tracing: Remove unneeded goto out logic (Jerome Marchand) [RHEL-115358]
+- tracing: Add down_write(trace_event_sem) when adding trace event (Jerome Marchand) [RHEL-115358] {CVE-2025-38539}
+- tracing/osnoise: Fix crash in timerlat_dump_stack() (Jerome Marchand) [RHEL-115358] {CVE-2025-38493}
+- tracing/probes: Avoid using params uninitialized in parse_btf_arg() (Jerome Marchand) [RHEL-115358]
+- ring-buffer: Remove ring_buffer_read_prepare_sync() (Jerome Marchand) [RHEL-115358]
+- kernel: trace: preemptirq_delay_test: use offstack cpu mask (Jerome Marchand) [RHEL-115358]
+- tracefs: Add d_delete to remove negative dentries (Jerome Marchand) [RHEL-115358]
+- ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Jerome Marchand) [RHEL-115358] {CVE-2025-38101}
+- ftrace: Fix UAF when lookup kallsym after ftrace disabled (Jerome Marchand) [RHEL-115358] {CVE-2025-38346}
+- ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Jerome Marchand) [RHEL-115358] {CVE-2025-38267}
+- ring-buffer: Move cpus_read_lock() outside of buffer->mutex (Jerome Marchand) [RHEL-115358]
+- tracing: Fix compilation warning on arm32 (Jerome Marchand) [RHEL-115358]
+- ring-buffer: Fix persistent buffer when commit page is the reader page (Jerome Marchand) [RHEL-115358]
+- ftrace: Fix preemption accounting for stacktrace filter command (Jerome Marchand) [RHEL-115358]
+- ftrace: Fix preemption accounting for stacktrace trigger command (Jerome Marchand) [RHEL-115358]
+- tracing: probes: Fix a possible race in trace_probe_log APIs (Jerome Marchand) [RHEL-115358]
+- tracing: samples: Initialize trace_array_printk() with the correct function (Jerome Marchand) [RHEL-115358]
+- tracing: Fix error handling in event_trigger_parse() (Jerome Marchand) [RHEL-115358]
+- tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Jerome Marchand) [RHEL-115358]
+- tracing: Do not take trace_event_sem in print_event_fields() (Jerome Marchand) [RHEL-115358]
+- tracing: Fix oob write in trace_seq_to_buffer() (Jerome Marchand) [RHEL-115358] {CVE-2025-37923}
+- tracing: Fix filter string testing (Jerome Marchand) [RHEL-115358]
+- ftrace: fix incorrect hash size in register_ftrace_direct() (Jerome Marchand) [RHEL-115358]
+- ftrace: Properly merge notrace hashes (Jerome Marchand) [RHEL-115358]
+- tracing: Do not add length to print format in synthetic events (Jerome Marchand) [RHEL-115358]
+- tracing: Move histogram trigger variables from stack to per CPU structure (Jerome Marchand) [RHEL-115358]
+- tracing: Constify struct event_trigger_ops (Jerome Marchand) [RHEL-115358]
+- ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() (Jerome Marchand) [RHEL-115358]
+- ftrace: Add cond_resched() to ftrace_graph_set_hash() (Jerome Marchand) [RHEL-115358] {CVE-2025-37940}
+- tracing: Verify event formats that have "%%*p.." (Jerome Marchand) [RHEL-115358] {CVE-2025-37938}
+- tracing: Add __print_dynamic_array() helper (Jerome Marchand) [RHEL-115358]
+- tracing: probe-events: Add comments about entry data storing code (Jerome Marchand) [RHEL-115358]
+- tracing: Fix synth event printk format for str fields (Jerome Marchand) [RHEL-115358]
+- tracing: Do not use PERF enums when perf is not defined (Jerome Marchand) [RHEL-115358]
+- tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Jerome Marchand) [RHEL-115358]
+- tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Jerome Marchand) [RHEL-115358]
+- tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Jerome Marchand) [RHEL-115358] {CVE-2025-22035}
+- tracing: Ensure module defining synth event cannot be unloaded while tracing (Jerome Marchand) [RHEL-115358]
+- tracing: Correct the refcount if the hist/hist_debug file fails to open (Jerome Marchand) [RHEL-115358]
+- ring-buffer: Fix bytes_dropped calculation issue (Jerome Marchand) [RHEL-115358]
+- tracing/hist: Support POLLPRI event for poll on histogram (Jerome Marchand) [RHEL-115358]
+- tracing/hist: Add poll(POLLIN) support on hist file (Jerome Marchand) [RHEL-115358]
+- tracing: Switch trace_events_hist.c code over to use guard() (Jerome Marchand) [RHEL-115358]
+Resolves: RHEL-115358, RHEL-115581, RHEL-115588, RHEL-115601, RHEL-119658, RHEL-121919
+
 * Tue Oct 28 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-147.el10]
 - redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124088]
 - blk-mq: fix blk_mq_tags double free while nr_requests grown (Ming Lei) [RHEL-118047]