Package kernel-image-centos: Information

- Updated to kernel-5.14.0-394.el9:
  + Add Add Intel Meteor Lake PCH-S LPSS PCI IDs
  + Add i2c-i801 support for MTL-S PCH
  + Add pinctrl support for MTL-S
  + Add support for Intel Birch Stream SoC
  + Backport OPP Tables for UFS Node
  + CNB94: ipv4: Invalidate neighbour for broadcast address upon address addition
  + CNB94: neighbour: annotate lockless accesses to n->nud_state
  + CNB94: net: add check for current MAC address in dev_set_mac_address
  + CNB94: xsk: Multi-buffer support
  + Fix possible deadlock in audit_exe_compare() code path
  + Merge commit '6085d3e6a6013fce864c359ac6faa23e3d8cb7da'
  + Merge commit '86bc7724d3d9ea8e92fbe0ceb6238a56ee3ce720'
  + Performance improvements of cryptography for PowerPC
  + RDMA/irdma: driver update to v6.6
  + RDMA: Bug fixes from v6.6
  + RDT: Support non-contiguous masks to be programmed into cache capacity MSRs
  + USB/TB code rebase of supported drivers to upstream v6.5
  + Update Kunit (el9.4)
  + Update userspace rtla to latest upstream
  + Updates for powerpc fadump and vmcore
  + XFS: sync to newer upstream version for RHEL9.4
  + arm64: update core arm64 code to upstream v6.6
  + block, bfq: fix uaf for bfqq in bic_set_bfqq()
  + bnxt_en: Driver update for RHEL-9.4
  + drm/mgag200: Flush the cache to improve latency
  + nvme: update firmware version after commit
  + perf test: Skip CoreSight tests if cs_etm// event is not available
  + perf: fix two broken tests
  + perf: sync tools headers with kernel
  + powerpc/code-patching: Pre-map patch area
  + redhat/Makefile: fix the detection of "-n" (RHTEST)
  + treewide: Implement new Red Hat driver and device status infrastructure
  + Various changes and improvements that are poorly described in merge.

- Updated to kernel-5.14.0-390.el9 (fixes: CVE-2023-45871):
  + ARM TLB Invalidate ASID improvements
  + CNB94: net: add missing includes and forward declarations under net/
  + EDAC: add support for Granite Rapids
  + Memory: Architectural Linear Address Masking (LAM)
  + Merge branch 'c9s-iommu' into RHEL-11561
  + Merge branch 'pci-sac' into RHEL-11561
  + Merge branch 'rhel9.4-vfio' into RHEL-11561
  + RHEL-9.4 P1 Bond stable backport
  + RHEL-9.4 P1 Selftest stable backport
  + Revert "KVM: s390: selftests: Add selftest for single-stepping"
  + Update userspace / kernel rv to latest upstream kernel
  + bpf: Change syscall_nr type to int in struct syscall_tp_t
  + bpf: update to 6.5
  + driver/base/cpu: Retry online operation if -EBUSY
  + ext4: fix racy may inline data check in dio write
  + fbdev/simplefb: Support memory-region & power-domains
  + gfs2: Fix another freeze/thaw hang
  + igb: set max size RX buffer when store bad packet is enabled
  + lpfc updates, patch sets 14.2.0.13 and 14.2.0.14 for centos-9
  + macsec: backports from upstream
  + mptcp: rebase to Linux 6.7
  + net-core: stable backports for 9.4 phase 1
  + net/other: phase-1 backports for RHEL-9.4
  + net/sched: phase-1 backports for RHEL-9.4
  + net: backport drop reason related patches
  + nvme-auth: use chap->s2 to indicate bidirectional authentication
  + ovs: P1 backports from upstream
  + perf: sync with upstream v6.6
  + sched/fair: Make the BW replenish timer expire in hardirq context for PREEMPT_RT
  + scsi: qedf: update qedf driver to latest upstream
  + scsi: qedi: update qedi driver to latest upstream
  + scsi: qla2xxx: update qla2xxx driver to latest upstream
  + tcp: allow again tcp_disconnect() when threads are waiting
  + tcp: enforce receive buffer memory limits by allowing the tcp window to shrink
  + tipc: backports from upstream
  + xfrm: backports from upstream

- Updated to kernel-5.14.0-387.el9 (fixes: CVE-2023-1192, CVE-2023-20569, CVE-2023-20588, CVE-2023-20593, CVE-2023-28866, CVE-2023-31083, CVE-2023-3567, CVE-2023-3812, CVE-2023-40283, CVE-2023-42753, CVE-2023-5178):
  + Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  + CNB94: lib: cpu_rmap: Add irq_cpu_rmap_remove to complement irq_cpu_rmap_add
  + CNB94: virtchnl: Sync headers with upstream
  + Enable -Werror for s390x and ppc64le
  + Ext4 Update for 9.4
  + Implement counters for nested guest shadow events
  + KVM: selftests: aarch64: Fix page_fault_test failure
  + Merge remote-tracking branch 'refs/remotes/c9s/merge-requests/3244' into c9s-iommu
  + Merge remote-tracking branch 'refs/remotes/c9s/merge-requests/3245' into c9s-iommu
  + RHEL-9.4 P1 Wireguard stable backport
  + RHEL-9.4 Update IPMI to upstream v6.5+
  + Revert "rcu: Permit start_poll_synchronize_rcu_expedited() to be invoked early"
  + SCSI updates for 9.4
  + USB/TB code rebase of supported drivers to upstream v6.4
  + Update net/bluetooth and drivers/bluetooth to upstream v6.5
  + Updates for Power IOMMU
  + Updates for powerpc CPT SMT
  + [s390] [IBM 9.4 FEAT] Upgrade the SMC driver to latest from upstream, e.g. kernel 6.4
  + [s390] [IBM 9.4 FEAT] Upgrade the qeth driver to latest from upstream, e.g. kernel 6.4
  + arm64: dts: imx8 updates
  + cifs: Fix UAF in cifs_demultiplex_thread()
  + clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name
  + hwmon: (ina3221) Add support for channel summation disable
  + iommu: IOMMU and DMA-mapping API Updates for 9.4
  + livepatch: selected fixes for rhel-9.4
  + nd_btt: Make BTT lanes preemptible
  + net: tun: fix bugs for oversize packet when napi frags enabled
  + netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  + nvme: update the drivers
  + nvmet-tcp: Fix a possible UAF in queue intialization setup
  + redhat/configs: Increase CONFIG_NODES_SHIFT from 6 to 8 for arm64
  + redhat: various fix ups
  + scsi: mpi3mr: driver update
  + scsi: mpt3sas: driver updates
  + tcp: stable backport for 9.4 phase 1
  + tty: serial: fsl_lpuart: driver updates
  + update drivers/base to v6.4
  + vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  + vfio: Updates for RHEL9.4
  + wifi: rtw89: Fix loading of compressed firmware
  + x86/speculation: Disable IBRS when idle
  + x86/srso: AMD Speculative RAS Overflow (Inception) Mitigation CVE-2023-20569