mirror of
https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9.git
synced 2026-09-09 00:08:12 +08:00
CKI KWF Bot
1af6f88517
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/8057 JIRA: https://redhat.atlassian.net/browse/RHEL-142637 CVE: CVE-2025-39852 CVE: CVE-2026-43384 CVE: CVE-2025-39950 CVE: CVE-2024-43887 CVE: CVE-2024-40985 CVE: CVE-2024-27394 Upstream Status: all mainline in net.git, except Kconfig and RPM specfile Omitted-fix: 3f36781e57b3 ("selftests/net: Add mixed select()+polling mode to TCP-AO tests"): a fix for flaky test on slow machines, whose backport on c9s is not trivial Omitted-fix: 9d58d14e3a18 ("crypto: api - Fold __crypto_alloc_tfmgfp() into __crypto_alloc_tfm()"): crypto_tfm rework not needed Omitted-fix: 0200de9d75b1 ("crypto: api - Fold crypto_alloc_tfmmem() into crypto_create_tfm_node()"): crypto_tfm rework not needed Omitted-fix: 3065170bfc7f ("crypto: api - Remove per-tfm refcount"): crypto_tfm rework not needed Omitted-fix: e1a9d3cc1182 ("tcp: initialize standalone TCP-AO response padding"): missing TCP NOP to pad TCP_AO option. Will follow-up with another MR Tested: - successful build with and without CONFIG_TCP_AO - ran kselftests in net/tcp_ao, all PASS Depends:!7999 patch 1-10 add support for cmac/hmac/hash cloning patch 11-12 are fixes for cmac/hmac/hash cloning patch 13-21 are needed to reduce conflicts patch 22-44 backport TCP_AO functionality from upstream patch 45-72 contain fixes+follow-ups patch 73-103 contain kselftests + fixes found while developing kselftests patch 104-108 contain later fixes patch 109 enable TCP_AO in c9s config patch 110 adds tcp_ao kselftests to kernel-selftests-internal RPM Signed-off-by: Davide Caratti <dcaratti@redhat.com> Approved-by: Jan Stancek <jstancek@redhat.com> Approved-by: Paolo Abeni <pabeni@redhat.com> Approved-by: Thomas Huth <thuth@redhat.com> Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> Merged-by: CKI GitLab Kmaint Pipeline Bot <26919896-cki-kmaint-pipeline-bot@users.noreply.gitlab.com>