ELSA-2026-75576

Описание

[6.12.0-211.62.1]

• Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
• Disable UKI signing [Orabug: 36571828]
• Update Oracle Linux certificates (Kevin Lyons)
• Disable signing for aarch64 (Ilya Okomin)
• Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
• Update x509.genkey [Orabug: 24817676]
• Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
• Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
• Add Oracle Linux IMA certificates
• Update module name for cryptographic module [Orabug: 37400433]
• Clean git history at setup stage
• Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
• Disable UKI signing [Orabug: 36571828]
• Update Oracle Linux certificates (Kevin Lyons)
• Disable signing for aarch64 (Ilya Okomin)
• Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
• Update x509.genkey [Orabug: 24817676]
• Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
• Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
• Add Oracle Linux IMA certificates
• Update module name for cryptographic module [Orabug: 37400433]
• Clean git history at setup stage

[6.12.0-211.62.1]

• dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099}
• net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034}
• gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261]
• gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261]
• gve: Use generic power management (Michal Schmidt) [RHEL-219261]
• gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261]
• gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261]
• gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261]
• gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261]
• gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261]
• gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261]
• gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261]
• gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261]
• gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261]
• gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261]
• gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261]
• net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261]
• gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261]
• gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261]
• gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261]
• gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261]
• gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261]
• gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261]
• gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261]
• gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261]
• gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261]
• gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261]
• gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261]
• gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261]
• gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261]
• gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261]
• gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261]
• gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261]
• gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261]
• gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261]
• gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261]
• gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261]
• gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261]
• gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261]
• gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261]
• gve: global: fix 'for a while' typo (Michal Schmidt) [RHEL-219261]
• gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261]
• gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261]
• gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261]
• gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261]
• gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261]
• gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261]
• gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261]
• gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261]
• gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261]
• gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261]
• gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261]
• gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261]
• gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261]
• gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261]
• gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261]
• gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261]
• gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261]
• gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261]
• gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261]
• gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261]
• gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261]
• gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261]
• gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261]
• gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261]
• gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261]
• gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261]
• gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261]
• gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261]
• gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261]
• gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261]
• gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261]
• gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261]
• gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261]
• gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261]
• gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261]
• gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261]
• gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261]
• gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261]
• gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261]
• gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261]
• gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261]