# changelog

author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.1.el10uek]
changelog:
  - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39656679]  {CVE-2026-52943}
  - md: fix array_state=clear sysfs deadlock (Yu Kuai)  [Orabug: 39656688]
  - md: fix return value of mddev_trylock (Xiao Ni)  [Orabug: 39656688]
  - md: avoid repeated calls to del_gendisk (Xiao Ni)  [Orabug: 39656688]
  - md: delete mddev kobj before deleting gendisk kobj (Xiao Ni)  [Orabug: 39656688]
  - md: add legacy_async_del_gendisk mode (Xiao Ni)  [Orabug: 39656688]
  - md: fix create on open mddev lifetime regression (Yu Kuai)  [Orabug: 39656688]
  - md: Don't clear MD_CLOSING until mddev is freed (Xiao Ni)  [Orabug: 39656688]
  - md: call del_gendisk in control path (Xiao Ni)  [Orabug: 39656688]


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.2.el10uek]
changelog:
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673880]  
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)   {CVE-2026-46331} 
  - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet)  [Orabug: 39668752]  
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner)  [Orabug: 39668743]  {CVE-2026-46242} 
  - eventpoll: move epi_fget() up (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: kill __ep_remove() (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: split __ep_remove() (Christian Brauner)  [Orabug: 39668743]  
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner)  [Orabug: 39668743]


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.2.el10uek]
changelog:
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673880]
  - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)   {CVE-2026-46331}
  - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet)  [Orabug: 39668752]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner)  [Orabug: 39668743]  {CVE-2026-46242}
  - eventpoll: move epi_fget() up (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: kill __ep_remove() (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: split __ep_remove() (Christian Brauner)  [Orabug: 39668743]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner)  [Orabug: 39668743]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.92.4.3.el10uek]
changelog:
  - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang)  [Orabug: 39727259]  {CVE-2026-31663}
  - xfrm: hold device only for the asynchronous decryption (Jianbo Liu)  [Orabug: 39727259]
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim)  [Orabug: 39727258]  {CVE-2026-46316}
  - ipv6: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39727239]  {CVE-2026-53362}


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.92.4.3.el10uek]
changelog:
  - xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang)  [Orabug: 39727259]  {CVE-2026-31663} 
  - xfrm: hold device only for the asynchronous decryption (Jianbo Liu)  [Orabug: 39727259]  
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim)  [Orabug: 39727258]  {CVE-2026-46316} 
  - ipv6: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39727239]  {CVE-2026-53362}


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.4.el10uek]
changelog:
  - Revert "arm64: acpi: Enable ACPI CCEL support" (Will Deacon)  [Orabug: 39772225]
  - virtio_pci: fix vq info pointer lookup via wrong index (Ammar Faizi)  [Orabug: 39772224]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-204.92.4.4.2.el10uek]
changelog:
  - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39819149]
  - net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819142]  {CVE-2026-64531}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [6.12.0-204.92.4.4.3.el10uek]
changelog:
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39832878]  {CVE-2026-64561} 
  - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832867]  {CVE-2026-68480}


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-204.92.4.4.el10uek]
changelog:
  - Revert "arm64: acpi: Enable ACPI CCEL support" (Will Deacon)  [Orabug: 39772225]  
  - virtio_pci: fix vq info pointer lookup via wrong index (Ammar Faizi)  [Orabug: 39772224]


author: Eric Sandeen <sandeen@redhat.com> - 6.10.1-1
changelog:
  - Update to latest upstream version
  - Fix C++ compilation errors in xfs_fs.h
  - Related: rhbz#2309693, rhbz#2308609


author: Darrick J. Wong <darrick.wong@oracle.com> 6.12.0-1.0.1
changelog:
  - Add mkfs configuration files for OL.
  - Add mkfs.xmem script.
  - Enable background online fsck services by default.  Users must set autofsck=1 on their filesystems.
  - Rebase atop latest upstream.


