Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
29 commits
Select commit Hold shift + click to select a range
042ab98
net: page_pool: avoid false positive warning if NAPI was never added
PlaidCat Jul 10, 2026
98b580f
net: mana: Fix double destroy_workqueue on service rescan PCI path
PlaidCat Jul 10, 2026
62107fd
net/mana: Null service_wq on setup error to prevent double destroy
PlaidCat Jul 10, 2026
e2cc61a
net/ipv6: ioam6: prevent schema length wraparound in trace fill
PlaidCat Jul 10, 2026
7b971b6
procfs: fix missing RCU protection when reading real_parent in do_tas…
PlaidCat Jul 10, 2026
ff4768a
tg3: Fix race for querying speed/duplex
PlaidCat Jul 10, 2026
a05c3c8
smb: client: fix off-by-8 bounds check in check_wsl_eas()
PlaidCat Jul 10, 2026
4902ba5
smb/client: fix out-of-bounds read in smb2_compound_op()
PlaidCat Jul 10, 2026
3d8e948
epoll: annotate racy check
PlaidCat Jul 10, 2026
d2ef5bd
eventpoll: defer struct eventpoll free to RCU grace period
PlaidCat Jul 10, 2026
eec3d73
eventpoll: use hlist_is_singular_node() in __ep_remove()
PlaidCat Jul 10, 2026
f5f9521
eventpoll: split __ep_remove()
PlaidCat Jul 10, 2026
fdbcbf7
eventpoll: kill __ep_remove()
PlaidCat Jul 10, 2026
bbfdb78
eventpoll: rename ep_remove_safe() back to ep_remove()
PlaidCat Jul 10, 2026
725937e
eventpoll: move epi_fget() up
PlaidCat Jul 10, 2026
bc0c5d7
eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()
PlaidCat Jul 10, 2026
dd4e169
eventpoll: fix ep_remove struct eventpoll / struct file UAF
PlaidCat Jul 10, 2026
d87282d
eventpoll: move f_lock acquisition into ep_remove_file()
PlaidCat Jul 10, 2026
9c84f43
eventpoll: refresh eventpoll_release() fast-path comment
PlaidCat Jul 10, 2026
3f69a3f
eventpoll: drop dead bool return from ep_remove_epi()
PlaidCat Jul 10, 2026
c669402
eventpoll: Fix semi-unbounded recursion
PlaidCat Jul 10, 2026
67861c5
eventpoll: drop vestigial epi->dying flag
PlaidCat Jul 10, 2026
4bf9518
eventpoll: Fix integer overflow in ep_loop_check_proc()
PlaidCat Jul 10, 2026
ae8b862
eventpoll: refresh epi_fget() / ep_remove_file() comments
PlaidCat Jul 10, 2026
b48a606
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SEN…
PlaidCat Jul 10, 2026
fdd6015
net/sched: ets: Always remove class from active list before deleting …
PlaidCat Jul 10, 2026
191223a
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
PlaidCat Jul 10, 2026
34b0112
KVM: x86: Fix shadow paging use-after-free due to unexpected role
PlaidCat Jul 10, 2026
f1dd39a
Rebuild rocky10_2 with kernel-6.12.0-211.32.1.el10_2
PlaidCat Jul 10, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
File renamed without changes.
2 changes: 1 addition & 1 deletion Makefile.rhelver
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ RHEL_MINOR = 2
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 211.30.1
RHEL_RELEASE = 211.32.1

#
# RHEL_REBASE_NUM
Expand Down
41 changes: 18 additions & 23 deletions arch/x86/kvm/mmu/mmu.c
Original file line number Diff line number Diff line change
Expand Up @@ -182,6 +182,8 @@ static struct kmem_cache *pte_list_desc_cache;
struct kmem_cache *mmu_page_header_cache;

static void mmu_spte_set(u64 *sptep, u64 spte);
static int mmu_page_zap_pte(struct kvm *kvm, struct kvm_mmu_page *sp,
u64 *spte, struct list_head *invalid_list);

struct kvm_mmu_role_regs {
const unsigned long cr0;
Expand Down Expand Up @@ -1283,19 +1285,6 @@ static void drop_spte(struct kvm *kvm, u64 *sptep)
rmap_remove(kvm, sptep);
}

static void drop_large_spte(struct kvm *kvm, u64 *sptep, bool flush)
{
struct kvm_mmu_page *sp;

sp = sptep_to_sp(sptep);
WARN_ON_ONCE(sp->role.level == PG_LEVEL_4K);

drop_spte(kvm, sptep);

if (flush)
kvm_flush_remote_tlbs_sptep(kvm, sptep);
}

/*
* Write-protect on the specified @sptep, @pt_protect indicates whether
* spte write-protection is caused by protecting shadow page table.
Expand Down Expand Up @@ -2460,12 +2449,15 @@ static struct kvm_mmu_page *kvm_mmu_get_child_sp(struct kvm_vcpu *vcpu,
u64 *sptep, gfn_t gfn,
bool direct, unsigned int access)
{
union kvm_mmu_page_role role;
union kvm_mmu_page_role role = kvm_mmu_child_role(sptep, direct, access);

if (is_shadow_present_pte(*sptep) && !is_large_pte(*sptep))
if (is_shadow_present_pte(*sptep) &&
!is_large_pte(*sptep) &&
spte_to_child_sp(*sptep) &&
spte_to_child_sp(*sptep)->gfn == gfn &&
spte_to_child_sp(*sptep)->role.word == role.word)
return ERR_PTR(-EEXIST);

role = kvm_mmu_child_role(sptep, direct, access);
return kvm_mmu_get_shadow_page(vcpu, gfn, role);
}

Expand Down Expand Up @@ -2540,13 +2532,16 @@ static void __link_shadow_page(struct kvm *kvm,

BUILD_BUG_ON(VMX_EPT_WRITABLE_MASK != PT_WRITABLE_MASK);

/*
* If an SPTE is present already, it must be a leaf and therefore
* a large one. Drop it, and flush the TLB if needed, before
* installing sp.
*/
if (is_shadow_present_pte(*sptep))
drop_large_spte(kvm, sptep, flush);
if (is_shadow_present_pte(*sptep)) {
struct kvm_mmu_page *parent_sp;
LIST_HEAD(invalid_list);

parent_sp = sptep_to_sp(sptep);
WARN_ON_ONCE(parent_sp->role.level == PG_LEVEL_4K);

mmu_page_zap_pte(kvm, parent_sp, sptep, &invalid_list);
kvm_mmu_remote_flush_or_zap(kvm, &invalid_list, true);
}

spte = make_nonleaf_spte(sp->spt, sp_ad_disabled(sp));

Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
Rebuild_History BUILDABLE
Rebuilding Kernel from rpm changelog with Fuzz Limit: 87.50%
Number of commits in upstream range v6.12~1..kernel-mainline: 138299
Number of commits in rpm: 30
Number of commits matched with upstream: 28 (93.33%)
Number of commits in upstream but not in rpm: 138271
Number of commits NOT found in upstream: 2 (6.67%)

Rebuilding Kernel on Branch rocky10_2_rebuild_kernel-6.12.0-211.32.1.el10_2 for kernel-6.12.0-211.32.1.el10_2
Clean Cherry Picks: 28 (100.00%)
Empty Cherry Picks: 0 (0.00%)
_______________________________

__EMPTY COMMITS__________________________

__CHANGES NOT IN UPSTREAM________________
Add partial riscv64 support for build root'
Provide basic VisionFive 2 support'
Loading
Loading