diff --git a/kernel-x86_64-debug-fedora.config b/kernel-x86_64-debug-fedora.config index b36e6b456..6e2247c6f 100644 --- a/kernel-x86_64-debug-fedora.config +++ b/kernel-x86_64-debug-fedora.config @@ -4367,6 +4367,7 @@ CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_VMSCAPE=y # CONFIG_MK8 is not set CONFIG_MKISS=m CONFIG_MLX4_CORE_GEN2=y diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index 4932f6f3d..a5e690da3 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -3876,6 +3876,7 @@ CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_VMSCAPE=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set # CONFIG_MLX4_CORE is not set diff --git a/kernel-x86_64-fedora.config b/kernel-x86_64-fedora.config index fb68fe2cb..1b42bec60 100644 --- a/kernel-x86_64-fedora.config +++ b/kernel-x86_64-fedora.config @@ -4341,6 +4341,7 @@ CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_VMSCAPE=y # CONFIG_MK8 is not set CONFIG_MKISS=m CONFIG_MLX4_CORE_GEN2=y diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index e6eec77bb..5b339f2d5 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -3856,6 +3856,7 @@ CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_VMSCAPE=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set # CONFIG_MLX4_CORE is not set diff --git a/kernel-x86_64-rt-debug-fedora.config b/kernel-x86_64-rt-debug-fedora.config index 19ade0269..1b0adcd61 100644 --- a/kernel-x86_64-rt-debug-fedora.config +++ b/kernel-x86_64-rt-debug-fedora.config @@ -4372,6 +4372,7 @@ CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_VMSCAPE=y # CONFIG_MK8 is not set CONFIG_MKISS=m CONFIG_MLX4_CORE_GEN2=y diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index 9560dc1b9..b79b7e7d5 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -3917,6 +3917,7 @@ CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_VMSCAPE=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set # CONFIG_MLX4_CORE is not set diff --git a/kernel-x86_64-rt-fedora.config b/kernel-x86_64-rt-fedora.config index 043de7ec5..3ffc2a01b 100644 --- a/kernel-x86_64-rt-fedora.config +++ b/kernel-x86_64-rt-fedora.config @@ -4346,6 +4346,7 @@ CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_VMSCAPE=y # CONFIG_MK8 is not set CONFIG_MKISS=m CONFIG_MLX4_CORE_GEN2=y diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index 7199f95ba..56221108e 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -3897,6 +3897,7 @@ CONFIG_MITIGATION_SSB=y CONFIG_MITIGATION_TAA=y CONFIG_MITIGATION_TSA=y CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_VMSCAPE=y # CONFIG_MK8 is not set # CONFIG_MLX4_CORE_GEN2 is not set # CONFIG_MLX4_CORE is not set diff --git a/kernel.changelog b/kernel.changelog index b75f676af..98e2e2364 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,8 @@ +* Thu Sep 11 2025 Justin M. Forbes [6.16.7-0] +- Turn on vmscape mitigation for x86 (Justin M. Forbes) +- Linux v6.16.7 +Resolves: + * Tue Sep 09 2025 Augusto Caringi [6.16.6-0] - Add another bug fix staged for 6.16 (Justin M. Forbes) - Turn on PHY_ROCKCHIP_SAMSUNG_DCPHY for Fedora (Justin M. Forbes) diff --git a/kernel.spec b/kernel.spec index 143ddb015..20ddbcadb 100644 --- a/kernel.spec +++ b/kernel.spec @@ -162,18 +162,18 @@ Summary: The Linux kernel # the --with-release option overrides this setting.) %define debugbuildsenabled 1 # define buildid .local -%define specrpmversion 6.16.6 -%define specversion 6.16.6 +%define specrpmversion 6.16.7 +%define specversion 6.16.7 %define patchversion 6.16 %define pkgrelease 200 %define kversion 6 -%define tarfile_release 6.16.6 +%define tarfile_release 6.16.7 # This is needed to do merge window version magic %define patchlevel 16 # This allows pkg_release to have configurable %%{?dist} tag %define specrelease 200%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.16.6 +%define kabiversion 6.16.7 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4360,6 +4360,10 @@ fi\ # # %changelog +* Thu Sep 11 2025 Justin M. Forbes [6.16.7-0] +- Turn on vmscape mitigation for x86 (Justin M. Forbes) +- Linux v6.16.7 + * Tue Sep 09 2025 Augusto Caringi [6.16.6-0] - Add another bug fix staged for 6.16 (Justin M. Forbes) - Turn on PHY_ROCKCHIP_SAMSUNG_DCPHY for Fedora (Justin M. Forbes) diff --git a/patch-6.16-redhat.patch b/patch-6.16-redhat.patch index f47531e1b..26090568d 100644 --- a/patch-6.16-redhat.patch +++ b/patch-6.16-redhat.patch @@ -37,7 +37,7 @@ 36 files changed, 493 insertions(+), 212 deletions(-) diff --git a/Makefile b/Makefile -index 0200497da26cd..8c468ec1a92ea 100644 +index 86359283ccc9a..993c93b35986b 100644 --- a/Makefile +++ b/Makefile @@ -355,6 +355,17 @@ ifneq ($(filter install,$(MAKECMDGOALS)),) diff --git a/sources b/sources index 135d508b4..b769c6449 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-6.16.6.tar.xz) = b9dc4778d9d593a6dccd2b9efcc6ffa914865938d801771148178792d1507a4b24f72c12ae4d3f617a66ca241c82f4cb220681b114756945294692c50f43bc7a -SHA512 (kernel-abi-stablelists-6.16.6.tar.xz) = 3e1ca08671444999068e69b09745e132d6b00ebb176e0e5da8c0d61f048a63c1fcdde672cefc8d57548d26b0248663c580b031f6f48bf94987dd94e24f8d7abe -SHA512 (kernel-kabi-dw-6.16.6.tar.xz) = 99e5a1e0f81032b89889d34da8f969ef9e35a34c0f370a3a4b3a0449d2ac2c0f274821f289c745920d254ac1c8e0d92fe630977516c21005dd4c0c5b8b46e277 +SHA512 (linux-6.16.7.tar.xz) = 4041baee5fb01afb1722e50e6b3529498804c591f937076fc83ab2abbfc0ccec5a6a0001e343d2e3b88ed8c3c974fd44bfee89225b163caea3700faf54881a3c +SHA512 (kernel-abi-stablelists-6.16.7.tar.xz) = 8198c22e2c43dd22ca5828e26d1c1b94c8901dad5f3d86d6979e023301acddda5b63cd4a970548c0cbd56bad1ceaa30e2f6cd0c2acd7e3ccf005303af8aa49a3 +SHA512 (kernel-kabi-dw-6.16.7.tar.xz) = ac0ceb870de01790c4d32f9b9f1527b7f9e08f49172b146c8389e38add64de000e38e65373b3edfc55625a7ec09da44d7516fc46153952cb515712300c90086d