[ All 3 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z ]
×

Package kernel-rt-kvm-5.14.0-570.46.1.el9_6.x86_64 download

Name kernel-rt-kvm
Epoch 0
Version 5.14.0
Release 570.46.1.el9_6
Architecture x86_64
Website/URL https://www.kernel.org/
License ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-Clear AND GFDL-1.1-no-invariants-or-later AND GPL-1.0-or-later AND (GPL-1.0-or-later OR BSD-3-Clause) AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only OR Apache-2.0) AND (GPL-2.0-only OR BSD-2-Clause) AND (GPL-2.0-only OR BSD-3-Clause) AND (GPL-2.0-only OR CDDL-1.0) AND (GPL-2.0-only OR GFDL-1.1-no-invariants-or-later) AND (GPL-2.0-only OR GFDL-1.2-no-invariants-only) AND (GPL-2.0-only WITH Linux-syscall-note) AND GPL-2.0-or-later AND (GPL-2.0-or-later OR BSD-2-Clause) AND (GPL-2.0-or-later OR BSD-3-Clause) AND (GPL-2.0-or-later OR CC-BY-4.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND ISC AND LGPL-2.0-or-later AND (LGPL-2.0-or-later OR BSD-2-Clause) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND LGPL-2.1-only AND (LGPL-2.1-only OR BSD-2-Clause) AND (LGPL-2.1-only WITH Linux-syscall-note) AND LGPL-2.1-or-later AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND (Linux-OpenIB OR GPL-2.0-only) AND (Linux-OpenIB OR GPL-2.0-only OR BSD-2-Clause) AND Linux-man-pages-copyleft AND MIT AND (MIT OR GPL-2.0-only) AND (MIT OR GPL-2.0-or-later) AND (MIT OR LGPL-2.1-only) AND (MPL-1.1 OR GPL-2.0-only) AND (X11 OR GPL-2.0-only) AND (X11 OR GPL-2.0-or-later) AND Zlib
Build Time 2025-09-23 11:47:40
Build Host builder-iso-x86-01.inferitos.ru
Summary KVM modules for package kernel-rt
Repositories NFV
Description This package provides KVM modules for package kernel-rt. }
Errata INFSA-2025:16398
Size 2563 KiB
Source Project kernel-5.14.0-570.46.1.el9_6
SHA-256 checksum eaadf3f95a7ffdc70c30cc0d5a3a1a14df0d3fbf3aba58ee64ca461a2aac5803
× Full screenshot
Changelog link 
* Tue Sep 16 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.46.1.el9_6]
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125}
- net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112246] {CVE-2023-53125}
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113558] {CVE-2025-39694}
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107301] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107301] {CVE-2025-38498}
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107649] {CVE-2025-37810}

* Sat Sep 13 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.45.1.el9_6]
- tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Adrian Moreno) [RHEL-113279]
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-108118]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-108118]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-108118]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-108118]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-108118]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-108118]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-108118]
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111766]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111766]

* Tue Sep 09 2025 Chao YE <cye@redhat.com> [5.14.0-570.44.1.el9_6]
- ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CKI Backport Bot) [RHEL-111149] {CVE-2025-38550}
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112780] {CVE-2025-38352}
- powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (CKI Backport Bot) [RHEL-113173]

* Sat Sep 06 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.43.1.el9_6]
- eth: bnxt: fix missing ring index trim on error path (CKI Backport Bot) [RHEL-104561] {CVE-2025-37873}
- book3s64/radix : Align section vmemmap start address to PAGE_SIZE (Mamatha Inamdar) [RHEL-109492]
- book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n (Mamatha Inamdar) [RHEL-109492]
- net: introduce per netns packet chains (Paolo Abeni) [RHEL-89050]
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108274]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108274]
- enic: get max rq & wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106604]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106604]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106604]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106604]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106604]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106604]
- enic: enic rq code reorg (John Meneghini) [RHEL-106604]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106604]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106604]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106604]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106604]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106604]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106604]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106604]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106604]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106604]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106604]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106604]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106604]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106604]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106604]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106604]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106604]
- enic: Report some per queue statistics in ethtool (John Meneghini) [RHEL-106604]
- enic: Report per queue statistics in netdev qstats (John Meneghini) [RHEL-106604]
- enic: Collect per queue statistics (John Meneghini) [RHEL-106604]
- enic: Use macro instead of static const variables for array sizes (John Meneghini) [RHEL-106604]
- enic: add ethtool get_channel support (John Meneghini) [RHEL-106604]
- enic: Validate length of nl attributes in enic_set_vf_port (John Meneghini) [RHEL-106604]
- enic: Replace hardcoded values for vnic descriptor by defines (John Meneghini) [RHEL-106604]
- enic: Avoid false positive under FORTIFY_SOURCE (John Meneghini) [RHEL-106604]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-106420]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-106420]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-106420]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-106420]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-106420]
- scsi: fnic: Remove unnecessary NUL-terminations (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove redundant flush_workqueue() calls (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace fnic->lock_flags with local flags (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-106419]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-106419]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-106419]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-106419]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-106419]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-106419]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-106419]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-106419]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-106419]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-106419]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-106419]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-106419]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-106419]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-106419]
- scsi: fnic: Use vcalloc() instead of vmalloc() and memset(0) (John Meneghini) [RHEL-106419]
- scsi: fnic: Move flush_work initialization out of if block (John Meneghini) [RHEL-106419]
- scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (John Meneghini) [RHEL-106419]
- scsi: fnic: Convert snprintf() to sysfs_emit() (John Meneghini) [RHEL-106419]
- scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-106419]
- scsi: fnic: unlock on error path in fnic_queuecommand() (John Meneghini) [RHEL-106419]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-106419]
- scsi: fnic: Improve logs and add support for multiqueue (MQ) (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for multiqueue (MQ) in fnic driver (John Meneghini) [RHEL-106419]
- scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove usage of host_lock (John Meneghini) [RHEL-106419]
- scsi: fnic: Define stats to track multiqueue (MQ) IOs (John Meneghini) [RHEL-106419]
- scsi: fnic: Modify ISRs to support multiqueue (MQ) (John Meneghini) [RHEL-106419]
- scsi: fnic: Refactor and redefine fnic.h for multiqueue (John Meneghini) [RHEL-106419]
- scsi: fnic: Get copy workqueue count and interrupt mode from config (John Meneghini) [RHEL-106419]
- scsi: fnic: Rename wq_copy to hw_copy_wq (John Meneghini) [RHEL-106419]
- scsi: fnic: Add and improve log messages (John Meneghini) [RHEL-106419]
- scsi: fnic: Add and use fnic number (John Meneghini) [RHEL-106419]
- scsi: fnic: Modify definitions to sync with VIC firmware (John Meneghini) [RHEL-106419]
- scsi: fnic: Return error if vmalloc() failed (John Meneghini) [RHEL-106419]
- scsi: fnic: Clean up some inconsistent indenting (John Meneghini) [RHEL-106419]
- scsi: fnic: Fix sg_reset success path (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace sgreset tag with max_tag_id (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (John Meneghini) [RHEL-106419]
- scsi: fnic: Use vmalloc_array() and vcalloc() (John Meneghini) [RHEL-106419]
- scsi: fnic: Use vzalloc() (John Meneghini) [RHEL-106419]
- scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (John Meneghini) [RHEL-106419]
- scsi: fnic: Replace DMA mask of 64 bits with 47 bits (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove unneeded flush_workqueue() (John Meneghini) [RHEL-106419]
- scsi: fnic: Remove redundant NULL check (John Meneghini) [RHEL-106419]
- scsi: fnic: Stop using the SCSI pointer (John Meneghini) [RHEL-106419]
- scsi: fnic: Fix a tracing statement (John Meneghini) [RHEL-106419]
- scsi: fnic: Call scsi_done() directly (John Meneghini) [RHEL-106419]
- Revert "driver core: Fix uevent_show() vs driver detach race" (Mark Langsdorf) [RHEL-85410]

* Sat Aug 30 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.42.1.el9_6]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103015]
- drm/framebuffer: Acquire internal references on GEM handles (José Expósito) [RHEL-106699] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (José Expósito) [RHEL-106699] {CVE-2025-38449}
- drm/vkms: Fix use after free and double free on init error (CKI KWF BOT) [RHEL-99420] {CVE-2025-22097}
- scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105933] {CVE-2025-38332}

* Thu Aug 28 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.41.1.el9_6]
- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-107002]
- net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-109494]
- ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-109494]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109723]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109723]
- smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109723]
- crypto: tegra - Fix IV usage for AES ECB (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix format specifier in tegra_sha_prep_cmd() (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Use HMAC fallback when keyslots are full (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Reserve keyslots to allocate dynamically (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Set IV to NULL explicitly for AES ECB (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix CMAC intermediate result handling (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Fix HASH intermediate result handling (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Transfer HASH init function to crypto engine (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - check return value for hash do_one_req (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - finalize crypto req on error (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Do not use fixed size buffers (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - Use separate buffer for setkey (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - remove redundant error check on ret (Nirmala Dalvi) [RHEL-107286]
- crypto: tegra - do not transfer req when tegra init fails (Nirmala Dalvi) [RHEL-107286]
- crypto: engine - Remove prepare/unprepare request (Nirmala Dalvi) [RHEL-107286]
- udmabuf: fix a buf size overflow issue during udmabuf creation (CKI Backport Bot) [RHEL-99746] {CVE-2025-37803}

* Wed Aug 27 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.40.1.el9_6]
- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106054] {CVE-2025-38392}

* Sat Aug 23 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.39.1.el9_6]
- xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109529] {CVE-2025-38500}
- Merge: net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response [rhel-9.6.z] (Maxim Levitsky) [RHEL-58904]
- s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-102036]
- s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-102036]
- s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-102036]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-102036]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Thomas Huth) [RHEL-102036] {CVE-2025-37946}
- s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-102036] {CVE-2025-37974}
- s390/pci: Fix potential double remove of hotplug slot (Thomas Huth) [RHEL-102036] {CVE-2024-56699}
- s390/pci: remove hotplug slot when releasing the device (Thomas Huth) [RHEL-102036]
- s390/pci: introduce lock to synchronize state of zpci_dev's (Thomas Huth) [RHEL-102036]
- s390/pci: rename lock member in struct zpci_dev (Thomas Huth) [RHEL-102036]
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107895]
- i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105137]
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-94815]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-85387]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-85387]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-85387]
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106651] {CVE-2025-38464}
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106415] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106415]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106415]
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103555]

* Wed Aug 20 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.38.1.el9_6]
- net/sched: ets: use old 'nbands' while purging unused classes (CKI Backport Bot) [RHEL-107537] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107537] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-37953}
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93387] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93387] {CVE-2025-37932}
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107630] {CVE-2025-37823}
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CKI Backport Bot) [RHEL-106046] {CVE-2025-38200}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106003] {CVE-2025-38461}
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104273] {CVE-2025-38211}

* Sat Aug 16 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.37.1.el9_6]
- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108152] {CVE-2025-38417}
- ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-105151]
- ethtool: Fix set RXNFC command with symmetric RSS hash (Mohammad Heib) [RHEL-103526]
- drm/i915: Give i915 and xe each their own display tracepoints (Jocelyn Falempe) [RHEL-94419]