# changelog

author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.9.1.rt7.311.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.9.1.rt7.311.el8_9 [RHEL-14973]
  - ice: reset first in crash dump kernels (Petr Oros) [2244625 2139761]
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (John Meneghini) [RHEL-11525 RHEL-11527] {CVE-2023-5178}
  - block: check_events: don't bother with events if unsupported (Ming Lei) [RHEL-15052 RHEL-2407]
  - Revert "block: unexport DISK_EVENT_MEDIA_CHANGE for legacy/fringe drivers" (Ming Lei) [RHEL-15052 RHEL-2407]
  - Revert "ide: unexport DISK_EVENT_MEDIA_CHANGE for ide-gd and ide-cd" (Ming Lei) [RHEL-15052 RHEL-2407]
  - block: disk_events: introduce event flags (Ming Lei) [RHEL-15052 RHEL-2407]
  - block: genhd: remove async_events field (Ming Lei) [RHEL-15052 RHEL-2407]
  - net: virtio_net_hdr_to_skb: count transport header in UFO (Cindy Lu) [RHEL-16332 RHEL-6030]
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Vitaly Kuznetsov) [RHEL-5764 RHEL-3656]


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.10.1.rt7.312.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.10.1.rt7.312.el8_9 [RHEL-17347]
  - pNFS/filelayout: treat GETDEVICEINFO errors as layout failure (Scott Mayhew) [RHEL-16407 RHEL-4969]
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Chris Leech) [RHEL-12092 RHEL-8992] {CVE-2023-2162}
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (Chris Leech) [RHEL-12092 RHEL-8992] {CVE-2023-2162}
  - KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs (Peter Xu) [RHEL-15121 RHEL-7210]
  - netfilter: conntrack: Fix gre tunneling over ipv6 (Florian Westphal) [RHEL-15259 RHEL-12497]
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) [RHEL-8450 RHEL-8451] {CVE-2023-42753}
  - tcp: enforce receive buffer memory limits by allowing the tcp window to shrink (Felix Maurer) [RHEL-15096 RHEL-15023]
  - redhat: change builder image to rhel-8.9 (Michael Hofmann)
  - net: openvswitch: add support for l4 symmetric hashing (Antoine Tenart) [RHEL-12746 RHEL-10498]
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16389 RHEL-2576] {CVE-2023-4622}


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.11.1.rt7.313.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.11.1.rt7.313.el8_9 [RHEL-17347]
  - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)
  - blk-mq: enforce op-specific segment limits in blk_insert_cloned_request (Ming Lei) [RHEL-14718 RHEL-14504]
  - KVM: x86: Add SBPB support (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - KVM: x86: Add IBPB_BRTYPE support (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/retpoline: Document some thunk handling aspects (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Remove unnecessary semicolon (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Disentangle rethunk-dependent options (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/bugs: Remove default case for fully switched enums (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Remove 'pred_cmd' label (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Unexport untraining functions (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Improve i-cache locality for alias mitigation (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Fix vulnerability reporting for missing microcode (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Print mitigation for retbleed IBPB case (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Print actual mitigation if requested mitigation isn't possible (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/alternatives: Remove faulty optimization (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Don't probe microcode in a guest (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Fix srso_show_state() side effect (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu: Fix amd_check_microcode() declaration (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/CPU/AMD: Remove amd_get_topology_early() (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Correct the mitigation status when SMT is disabled (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Explain the untraining sequences a bit more (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu: Cleanup the untrain mess (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu: Rename original retbleed methods (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu: Clean up SRSO return thunk mess (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/alternative: Make custom return thunk unconditional (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - objtool/x86: Fix SRSO mess (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu: Fix __x86_return_thunk symbol type (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Disable the mitigation on unaffected configurations (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - driver core: cpu: Fix the fallback cpu_show_gds() name (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86: Move gds_ucode_mitigated() declaration to header (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/speculation: Add cpu_show_gds() prototype (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - driver core: cpu: Make cpu_show_not_affected() static (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Fix build breakage with the LLVM linker (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - Documentation/srso: Document IBPB aspect and fix formatting (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - driver core: cpu: Unify redundant silly stubs (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Add a forgotten NOENDBR annotation (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Fix return thunks in generated code (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Add IBPB on VMEXIT (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Add IBPB (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Add SRSO_NO support (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Add IBPB_BRTYPE support (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/srso: Add a Speculative RAS Overflow mitigation (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/retbleed: Add __x86_return_thunk alignment checks (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/retbleed: Fix return thunk alignment (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/alternative: Optimize returns patching (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/microcode/AMD: Load late on both threads too (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86/returnthunk: Allow different return thunks (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - x86: Sanitize linker script (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - objtool: Fix .return_sites generation (Waiman Long) [RHEL-14116 RHEL-11272] {CVE-2023-20569}
  - drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/amdgpu: Fix possible null pointer dereference (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Keep a gem reference to user bos in surfaces (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: fix typo of sizeof argument (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Fix possible invalid drm gem put calls (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Fix shader stage validation (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: remove unused vmw_overlay function (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Print errors when running on broken/unsupported configs (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Drop mksstat_init_record fn as currently unused (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Fix src/dst_pitch confusion (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Replace one-element array with flexible-array member (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Do not drop the reference to the handle too soon (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Stop accessing buffer objects which failed init (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Make the driver work without the dummy resources (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Stop using raw ttm_buffer_object's (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Abstract placement selection (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Rename dummy to is_iomem (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Cleanup the vmw bo usage in the cursor paths (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Simplify fb pinning (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Rename vmw_buffer_object to vmw_bo (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Remove the duplicate bo_free function (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/vmwgfx: Use the common gem mmap instead of the custom code (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/radeon: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/qxl: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/gem-vram: handle NULL bo->resource in move callback (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/ttm: prevent moving of pinned BOs (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/ttm: stop allocating a dummy resource for pipelined gutting (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/ttm: stop allocating dummy resources during BO creation (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/ttm: clear the ttm_tt when bo->resource is NULL (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - drm/i915/ttm: audit remaining bo->resource (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Stop accessing buffer objects which failed init" (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Do not drop the reference to the handle too soon" (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}
  - Revert "drm/vmwgfx: Fix Legacy Display Unit atomic drm support" (Jocelyn Falempe) [RHEL-14513 RHEL-14514] {CVE-2023-5633}


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.12.1.rt7.314.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.12.1.rt7.314.el8_9 [RHEL-19561]
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16859 RHEL-16616] {CVE-2023-4623}
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16859 RHEL-16616] {CVE-2023-4623}
  - net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14423 RHEL-16616] {CVE-2023-4921}
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14423 RHEL-16616] {CVE-2023-4921}
  - net/tls: Remove the context from the list in tls_device_down (Jay Shin) [RHEL-17813 RHEL-17301]
  - tls: Fix context leak on tls_device_down (Jay Shin) [RHEL-17813 RHEL-17301]
  - igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15198 RHEL-15199] {CVE-2023-45871}


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.13.1.rt7.315.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.12.1.rt7.314.el8_9 [RHEL-19561]
  - Fix double fget() in vhost_net_set_backend() (Jon Maloy) [RHEL-13229 RHEL-7266] {CVE-2023-1838}
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Ricardo Robaina) [RHEL-19523 RHEL-7053] {CVE-2023-2166}
  - RDMA/core: Update CMA destination address on rdma_resolve_addr (Kamal Heib) [RHEL-19407 RHEL-7243] {CVE-2023-2176}
  - RDMA/core: Refactor rdma_bind_addr (Kamal Heib) [RHEL-19407 RHEL-7243] {CVE-2023-2176}
  - net: fix net device address assign type (Michal Schmidt) [RHEL-17296 RHEL-6383]
  - net: add check for current MAC address in dev_set_mac_address (Michal Schmidt) [RHEL-17296 RHEL-6383]
  - perf/core: Fix potential NULL deref (Wander Lairson Costa) [RHEL-18007 RHEL-14983] {CVE-2023-5717}
  - perf: Disallow mis-matched inherited group reads (Wander Lairson Costa) [RHEL-18007 RHEL-14983] {CVE-2023-5717}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Michal Schmidt) [RHEL-19026 RHEL-7240] {CVE-2022-41858}


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.14.1.rt7.316.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.14.1.rt7.316.el8_9 [RHEL-19561]
  - nfp: fix use-after-free in area_cache_get() (Ricardo Robaina) [RHEL-19533 RHEL-7242] {CVE-2022-3545}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (David Marlin) [RHEL-20501 RHEL-2716] {CVE-2023-40283}
  - md/raid5: release batch_last before waiting for another stripe_head (Nigel Croxon) [RHEL-12284 RHEL-9875]


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.15.1.rt7.317.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.15.1.rt7.317.el8_9 [RHEL-19561]
  - IB/ipoib: Fix mcast list locking (Daniel Vacek) [RHEL-19699 RHEL-19244]
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Daniel Vacek) [RHEL-19699 RHEL-19244]
  - x86/sev: Check for user-space IOIO pointing to kernel space (Wander Lairson Costa) [RHEL-18017 RHEL-14979] {CVE-2023-46813}
  - x86/sev: Check IOBM for IOIO exceptions from user-space (Wander Lairson Costa) [RHEL-18017 RHEL-14979] {CVE-2023-46813}
  - x86/sev: Disable MMIO emulation from user mode (Wander Lairson Costa) [RHEL-18017 RHEL-14979] {CVE-2023-46813}
  - x86/sev-es: Fix SEV-ES OUT/IN immediate opcode vc handling (Wander Lairson Costa) [RHEL-18017 RHEL-14979] {CVE-2023-46813}


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.16.1.rt7.318.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.16.1.rt7.318.el8_9 [RHEL-19561]
  - tracing/timerlat: Add user-space interface (Chris White) [RHEL-20362 RHEL-15142]
  - tracing/osnoise: Skip running osnoise if all instances are off (Chris White) [RHEL-20362 RHEL-15142]
  - tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (Chris White) [RHEL-20362 RHEL-15142]
  - tracing/timerlat: Always wakeup the timerlat thread (Chris White) [RHEL-20362 RHEL-15142]
  - tracing/osnoise: Fix notify new tracing_max_latency (Chris White) [RHEL-20362 RHEL-15142]
  - tracing/timerlat: Notify new max thread latency (Chris White) [RHEL-20362 RHEL-15142]
  - trace/osnoise: make use of the helper function kthread_run_on_cpu() (Chris White) [RHEL-20362 RHEL-15142]
  - kthread: add the helper function kthread_run_on_cpu() (Chris White) [RHEL-20362 RHEL-15142]
  - x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing (Prarit Bhargava) [RHEL-7238 RHEL-4244]
  - HID: check empty report_list in hid_validate_values() (Desnes Nunes) [RHEL-19268 RHEL-19260] {CVE-2023-1073}
  - s390/dasd: print copy pair message only for the correct error (Tobias Huschle) [RHEL-9444 RHEL-2831]
  - blk-mq: don't count completed flush data request as inflight in case of quiesce (Ming Lei) [RHEL-19111 RHEL-18055]


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.17.1.rt7.319.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.17.1.rt7.319.el8_9 [RHEL-19561]
  - redhat: rewrite genlog and support Y- tags (Jan Stancek)
  - smb: client: fix OOB in smbCalcSize() (Scott Mayhew) [RHEL-21667 RHEL-18991] {CVE-2023-6606}
  - s390/qeth: Don't call dev_close/dev_open (DOWN/UP) (Tobias Huschle) [RHEL-17884 RHEL-2410]
  - blk-mq: use quiesced elevator switch when reinitializing queues (Ming Lei) [RHEL-21785 RHEL-19944]
  - lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly (Ming Lei) [RHEL-20232 RHEL-8128]


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-513.18.1.rt7.320.el8_9]
changelog:
  - [rt] build kernel-rt-4.18.0-513.18.1.rt7.320.el8_9 [RHEL-19561]
  - net: tls, update curr on splice as well (Sabrina Dubroca) [RHEL-22102 RHEL-19068] {CVE-2024-0646}
  - smb: client: fix potential OOB in smb2_dump_detail() (Scott Mayhew) [RHEL-21675 RHEL-19145] {CVE-2023-6610}
  - smb: client: fix potential OOB in cifs_dump_detail() (Scott Mayhew) [RHEL-21675 RHEL-19145] {CVE-2023-6610}
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) [RHEL-22296 RHEL-22633 RHEL-22639 RHEL-19154 RHEL-19160 RHEL-19166] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - nvmet-tcp: remove boilerplate code (Maurizio Lombardi) [RHEL-22296 RHEL-22633 RHEL-22639 RHEL-19154 RHEL-19160 RHEL-19166] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) [RHEL-22296 RHEL-22633 RHEL-22639 RHEL-19154 RHEL-19160 RHEL-19166] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [RHEL-22296 RHEL-22633 RHEL-22639 RHEL-19154 RHEL-19160 RHEL-19166] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - net-sysfs: add check for netdevice being present to speed_show (Michal Schmidt) [RHEL-20924 RHEL-16007]
  - netfilter: nft_set_pipapo: skip inactive elements during set walk (Florian Westphal) [RHEL-20706 RHEL-19960] {CVE-2023-6817}


