[FIPS-8-Compliant] batch 12 fips-8-compliant/4.18.0-553.16.1

[PlaidCat]

FIPS touching changes

None

[jmaple@devbox kernel-src-tree]$ for git_path in arch/x86/crypto/ crypto/asymmetric_keys/ crypto/ drivers/crypto/ drivers/char/random.c include/crypto; do echo "== $git_path =="; git log --oneline --name-only origin/fips-8-compliant/4.18.0-553.16.1..HEAD $git_path; done
== arch/x86/crypto/ ==
== crypto/asymmetric_keys/ ==
== crypto/ ==
== drivers/crypto/ ==
== drivers/char/random.c ==
== include/crypto ==

Commits

    net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class

    jira VULN-89289
    jira VULN-89290
    cve-bf CVE-2025-38477
    commit-author Xiang Mei <[email protected]>
    commit cf074eca0065bc5142e6004ae236bb35a2687fdf

    net/sched: sch_qfq: Fix race condition on qfq_aggregate

    jira VULN-89290
    jira VULN-89289
    cve CVE-2025-38477
    commit-author Xiang Mei <[email protected]>
    commit 5e28d5a3f774f118896aec17a3a20a9c5c9dfc64

    tipc: Fix use-after-free in tipc_conn_close().

    jira VULN-80316
    jira VULN-80315
    cve CVE-2025-38464
    commit-author Kuniyuki Iwashima <[email protected]>
    commit 667eeab4999e981c96b447a4df5f20bdf5c26f13

    idpf: convert control queue mutex to a spinlock

    jira VULN-136697
    jira VULN-136696
    cve CVE-2025-38392
    commit-author Ahmed Zaki <[email protected]>
    commit b2beb5bb2cd90d7939e470ed4da468683f41baa3

    scsi: lpfc: Use memcpy() for BIOS version

    jira VULN-72456
    jira VULN-72455
    cve CVE-2025-38332
    commit-author Daniel Wagner <[email protected]>
    commit ae82eaf4aeea060bb736c3e20c0568b67c701d7d

KBuild

[jmaple@devbox code]$ egrep -B 5 -A 5 "\[TIMER\]|^Starting Build" $(ls -t kbuild* | head -n1)
/mnt/code/kernel-src-tree-build
Running make mrproper...
[TIMER]{MRPROPER}: 5s
x86_64 architecture detected, copying config
'configs/kernel-x86_64.config' -> '.config'
Setting Local Version for build
CONFIG_LOCALVERSION="-jmaple_batch_12_fips-8-compliant_4.18.0-553.16.1-9a06"
Making olddefconfig
--
  HOSTLD  scripts/kconfig/conf
scripts/kconfig/conf  --olddefconfig Kconfig
#
# configuration written to .config
#
Starting Build
scripts/kconfig/conf  --syncconfig Kconfig
  SYSTBL  arch/x86/include/generated/asm/syscalls_32.h
  SYSHDR  arch/x86/include/generated/asm/unistd_32_ia32.h
  SYSHDR  arch/x86/include/generated/asm/unistd_64_x32.h
  SYSTBL  arch/x86/include/generated/asm/syscalls_64.h
--
  LD [M]  sound/usb/usx2y/snd-usb-usx2y.ko
  LD [M]  sound/virtio/virtio_snd.ko
  LD [M]  sound/x86/snd-hdmi-lpe-audio.ko
  LD [M]  sound/xen/snd_xen_front.ko
  LD [M]  virt/lib/irqbypass.ko
[TIMER]{BUILD}: 1958s
Making Modules
  INSTALL arch/x86/crypto/blowfish-x86_64.ko
  INSTALL arch/x86/crypto/camellia-aesni-avx-x86_64.ko
  INSTALL arch/x86/crypto/camellia-aesni-avx2.ko
  INSTALL arch/x86/crypto/camellia-x86_64.ko
--
  INSTALL sound/virtio/virtio_snd.ko
  INSTALL sound/x86/snd-hdmi-lpe-audio.ko
  INSTALL sound/xen/snd_xen_front.ko
  INSTALL virt/lib/irqbypass.ko
  DEPMOD  4.18.0-jmaple_batch_12_fips-8-compliant_4.18.0-553.16.1-9a06+
[TIMER]{MODULES}: 15s
Making Install
sh ./arch/x86/boot/install.sh 4.18.0-jmaple_batch_12_fips-8-compliant_4.18.0-553.16.1-9a06+ arch/x86/boot/bzImage \
        System.map "/boot"
[TIMER]{INSTALL}: 21s
Checking kABI
kABI check passed
Setting Default Kernel to /boot/vmlinuz-4.18.0-jmaple_batch_12_fips-8-compliant_4.18.0-553.16.1-9a06+ and Index to 0
Hopefully Grub2.0 took everything ... rebooting after time metrices
[TIMER]{MRPROPER}: 5s
[TIMER]{BUILD}: 1958s
[TIMER]{MODULES}: 15s
[TIMER]{INSTALL}: 21s
[TIMER]{TOTAL} 2005s
Rebooting in 10 seconds

KSelfTest

[jmaple@devbox code]$ ls -rt kselftest.* | tail -n4 | while read line; do echo $line; grep '^ok ' $line | wc -l ; done
kselftest.4.18.0-553.16.1.el8_10.ciqfips.0.13.1.x86_64.log
201
kselftest.4.18.0-jmaple_batch_12_fips-8-compliant_4.18.0-553.16.1-0bc2+.log
204
kselftest.4.18.0-jmaple_batch_12_fips-8-compliant_4.18.0-553.16.1-d70e+.log
204
kselftest.4.18.0-jmaple_batch_12_fips-8-compliant_4.18.0-553.16.1-9a06+.log
204

[github-actions]

🔍 Upstream Linux Kernel Commit Check

• ⚠️ PR commit c1bf8405c850 (net/sched: sch_qfq: Fix race condition on qfq_aggregate) references upstream commit
  5e28d5a3f774 which has been referenced by a Fixes: tag in the upstream
  Linux kernel:

    cf074eca0065 net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (Xiang Mei)

This is an automated message from the kernel commit checker workflow.

[bmastbergen]

🥌