kernel-mshv/uvm: upgrade to 6.6.137.mshv1

Redent0r · Redent0r · commit ff7fc4507f71 · 2026-05-05T14:07:18.000-07:00
Fixes CVE-2026-31431 - Copy Fail Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
diff --git a/SPECS-SIGNED/kernel-mshv-signed/kernel-mshv-signed.spec b/SPECS-SIGNED/kernel-mshv-signed/kernel-mshv-signed.spec
@@ -9,7 +9,7 @@
 %define uname_r %{version}-%{release}
 Summary:        Signed MSHV-enabled Linux Kernel for %{buildarch} systems
 Name:           kernel-mshv-signed-%{buildarch}
-Version:        6.6.135.mshv2
+Version:        6.6.137.mshv1
 Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
@@ -140,6 +140,9 @@ echo "initrd of kernel %{uname_r} removed" >&2
 %exclude /lib/modules/%{uname_r}/build
 
 %changelog
+* Tue May 05 2026 Saul Paredes <saulparedes@microsoft.com> - 6.6.137.mshv1-1
+- Upgrade to 6.6.137.mshv1
+
 * Mon Apr 27 2026 Saul Paredes <saulparedes@microsoft.com> - 6.6.135.mshv2-1
 - Upgrade to 6.6.135.mshv2
 
diff --git a/SPECS/kernel-mshv/config b/SPECS/kernel-mshv/config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86_64 6.6.135.mshv2 Kernel Configuration
+# Linux/x86_64 6.6.137.mshv1 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"
 CONFIG_CC_IS_GCC=y
diff --git a/SPECS/kernel-mshv/config_aarch64 b/SPECS/kernel-mshv/config_aarch64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 6.6.135.mshv2 Kernel Configuration
+# Linux/arm64 6.6.137.mshv1 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"
 CONFIG_CC_IS_GCC=y
diff --git a/SPECS/kernel-mshv/kernel-mshv.signatures.json b/SPECS/kernel-mshv/kernel-mshv.signatures.json
@@ -3,8 +3,8 @@
     "50_mariner_mshv.cfg": "12bf23f8857f893549933a20062ad2a69c3c654b87893e8dd3ce42f9329801c7",
     "50_mariner_mshv_menuentry": "5a46bb273be0e829fec4e1f498b1a11b59ded6e14d42a19be7da860c3f4c35be",
     "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0",
-    "config": "f9878001e74a04551ae3d4b5ebcc9bfc6f154eaad592adeb39aba3c99240c153",
-    "kernel-mshv-6.6.135.mshv2.tar.gz": "7129F5EE0BE3354F0F6520778ECF5CA9A1DF11DF55567B28D139792B72C3BC45",
-    "config_aarch64": "1cfdac79f8d7aedaa307f6ceca53c14cdb7987a9d245fe392f5c4f598c1c3cd2"
+    "config": "1d2a651010da7f085e0f84d9a9a87d91ae11d5198fba0855811f6653c99ba919",
+    "kernel-mshv-6.6.137.mshv1.tar.gz": "1d4dbcf9768471fff5934899d8008a1260f225dc910e6dfd3e73f7d420b54b4a",
+    "config_aarch64": "3127fe65dda320d1875dd7d06fe51fc38b6f2643b931aced0dd9d1e0087cd9df"
   }
 }
diff --git a/SPECS/kernel-mshv/kernel-mshv.spec b/SPECS/kernel-mshv/kernel-mshv.spec
@@ -17,7 +17,7 @@
 
 Summary:        Mariner kernel that has MSHV Host support
 Name:           kernel-mshv
-Version:        6.6.135.mshv2
+Version:        6.6.137.mshv1
 Release:        1%{?dist}
 License:        GPLv2
 Group:          Development/Tools
@@ -267,6 +267,8 @@ echo "initrd of kernel %{uname_r} removed" >&2
 %{_includedir}/perf/perf_dlfilter.h
 
 %changelog
+* Tue May 05 2026 Saul Paredes <saulparedes@microsoft.com> - 6.6.137.mshv1-1
+- Upgrade to 6.6.137.mshv1
 
 * Fri Apr 24 2026 Saul Paredes <saulparedes@microsoft.com> - 6.6.135.mshv2-1
 - Upgrade to 6.6.135.mshv2
diff --git a/SPECS/kernel-uvm/config b/SPECS/kernel-uvm/config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86_64 6.6.130.mshv1 Kernel Configuration
+# Linux/x86_64 6.6.137.mshv1 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"
 CONFIG_CC_IS_GCC=y
diff --git a/SPECS/kernel-uvm/config_aarch64 b/SPECS/kernel-uvm/config_aarch64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 6.6.130.mshv1 Kernel Configuration
+# Linux/arm64 6.6.137.mshv1 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"
 CONFIG_CC_IS_GCC=y
diff --git a/SPECS/kernel-uvm/kernel-uvm.signatures.json b/SPECS/kernel-uvm/kernel-uvm.signatures.json
@@ -1,7 +1,7 @@
 {
   "Signatures": {
-    "config": "dbc2efe9a135cd5420fbdba4f6204404329e7a9c614a3af0f0fdc0a5692c0253",
-    "kernel-uvm-6.6.130.mshv1.tar.gz": "997d1af2e6560deb5441fd4f3b9029f22abd1586f7154616e602dfcf7d6e70ee",
-    "config_aarch64": "1efc25d3736f0638c180a26e140936cf9eafb4f15fda46b5d9acd36df6e48a97"
+    "config": "5b7cb5ceb91d94027a053f55d3a923c58535fbcb3548de4ffbd4b748af7f97e7",
+    "kernel-uvm-6.6.137.mshv1.tar.gz": "5dd65745817a26ce13a28a1a37c69d9e3cecae74fc7a89677771d7da6d91e590",
+    "config_aarch64": "ed6e9eea7d8f0e08cc44901e08ef101801d7f58d4b3bda6a584f7f0908dd9137"
   }
 }
diff --git a/SPECS/kernel-uvm/kernel-uvm.spec b/SPECS/kernel-uvm/kernel-uvm.spec
@@ -16,7 +16,7 @@
 
 Summary:        Linux Kernel for Kata UVM
 Name:           kernel-uvm
-Version:        6.6.130.mshv1
+Version:        6.6.137.mshv1
 Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
@@ -165,6 +165,9 @@ find %{buildroot}/lib/modules -name '*.ko' -exec chmod u+x {} +
 %{_prefix}/src/linux-headers-%{uname_r}
 
 %changelog
+* Tue May 05 2026 Saul Paredes <saulparedes@microsoft.com> - 6.6.137.mshv1-1
+- Upgrade to 6.6.137.mshv1
+
 * Tue Apr 21 2026 Saul Paredes <saulparedes@microsoft.com> - 6.6.130.mshv1-1
 - Upgrade to 6.6.130.mshv1
 
diff --git a/cgmanifest.json b/cgmanifest.json
@@ -8401,8 +8401,8 @@
         "type": "other",
         "other": {
           "name": "kernel-mshv",
-          "version": "6.6.135.mshv2",
-          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/kata/6.6.135.mshv2.tar.gz"
+          "version": "6.6.137.mshv1",
+          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/kata/6.6.137.mshv1.tar.gz"
         }
       }
     },
@@ -8431,8 +8431,8 @@
         "type": "other",
         "other": {
           "name": "kernel-uvm",
-          "version": "6.6.130.mshv1",
-          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/kata-uvm/6.6.130.mshv1.tar.gz"
+          "version": "6.6.137.mshv1",
+          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/kata-uvm/6.6.137.mshv1.tar.gz"
         }
       }
     },

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`#`
`2`	`2`	`# Automatically generated file; DO NOT EDIT.`
`3`		`-# Linux/x86_64 6.6.135.mshv2 Kernel Configuration`
	`3`	`+# Linux/x86_64 6.6.137.mshv1 Kernel Configuration`
`4`	`4`	`#`
`5`	`5`	`CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"`
`6`	`6`	`CONFIG_CC_IS_GCC=y`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`#`
`2`	`2`	`# Automatically generated file; DO NOT EDIT.`
`3`		`-# Linux/arm64 6.6.135.mshv2 Kernel Configuration`
	`3`	`+# Linux/arm64 6.6.137.mshv1 Kernel Configuration`
`4`	`4`	`#`
`5`	`5`	`CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"`
`6`	`6`	`CONFIG_CC_IS_GCC=y`
Original file line number	Diff line number	Diff line change
`@@ -3,8 +3,8 @@`
`3`	`3`	`"50_mariner_mshv.cfg": "12bf23f8857f893549933a20062ad2a69c3c654b87893e8dd3ce42f9329801c7",`
`4`	`4`	`"50_mariner_mshv_menuentry": "5a46bb273be0e829fec4e1f498b1a11b59ded6e14d42a19be7da860c3f4c35be",`
`5`	`5`	`"cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0",`
`6`		`- "config": "f9878001e74a04551ae3d4b5ebcc9bfc6f154eaad592adeb39aba3c99240c153",`
`7`		`- "kernel-mshv-6.6.135.mshv2.tar.gz": "7129F5EE0BE3354F0F6520778ECF5CA9A1DF11DF55567B28D139792B72C3BC45",`
`8`		`- "config_aarch64": "1cfdac79f8d7aedaa307f6ceca53c14cdb7987a9d245fe392f5c4f598c1c3cd2"`
	`6`	`+ "config": "1d2a651010da7f085e0f84d9a9a87d91ae11d5198fba0855811f6653c99ba919",`
	`7`	`+ "kernel-mshv-6.6.137.mshv1.tar.gz": "1d4dbcf9768471fff5934899d8008a1260f225dc910e6dfd3e73f7d420b54b4a",`
	`8`	`+ "config_aarch64": "3127fe65dda320d1875dd7d06fe51fc38b6f2643b931aced0dd9d1e0087cd9df"`
`9`	`9`	`}`
`10`	`10`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`#`
`2`	`2`	`# Automatically generated file; DO NOT EDIT.`
`3`		`-# Linux/x86_64 6.6.130.mshv1 Kernel Configuration`
	`3`	`+# Linux/x86_64 6.6.137.mshv1 Kernel Configuration`
`4`	`4`	`#`
`5`	`5`	`CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"`
`6`	`6`	`CONFIG_CC_IS_GCC=y`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`#`
`2`	`2`	`# Automatically generated file; DO NOT EDIT.`
`3`		`-# Linux/arm64 6.6.130.mshv1 Kernel Configuration`
	`3`	`+# Linux/arm64 6.6.137.mshv1 Kernel Configuration`
`4`	`4`	`#`
`5`	`5`	`CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"`
`6`	`6`	`CONFIG_CC_IS_GCC=y`
Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"Signatures": {`
`3`		`- "config": "dbc2efe9a135cd5420fbdba4f6204404329e7a9c614a3af0f0fdc0a5692c0253",`
`4`		`- "kernel-uvm-6.6.130.mshv1.tar.gz": "997d1af2e6560deb5441fd4f3b9029f22abd1586f7154616e602dfcf7d6e70ee",`
`5`		`- "config_aarch64": "1efc25d3736f0638c180a26e140936cf9eafb4f15fda46b5d9acd36df6e48a97"`
	`3`	`+ "config": "5b7cb5ceb91d94027a053f55d3a923c58535fbcb3548de4ffbd4b748af7f97e7",`
	`4`	`+ "kernel-uvm-6.6.137.mshv1.tar.gz": "5dd65745817a26ce13a28a1a37c69d9e3cecae74fc7a89677771d7da6d91e590",`
	`5`	`+ "config_aarch64": "ed6e9eea7d8f0e08cc44901e08ef101801d7f58d4b3bda6a584f7f0908dd9137"`
`6`	`6`	`}`
`7`	`7`	`}`
Original file line number	Diff line number	Diff line change
`@@ -8401,8 +8401,8 @@`
`8401`	`8401`	`"type": "other",`
`8402`	`8402`	`"other": {`
`8403`	`8403`	`"name": "kernel-mshv",`
`8404`		`- "version": "6.6.135.mshv2",`
`8405`		`- "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/kata/6.6.135.mshv2.tar.gz"`
	`8404`	`+ "version": "6.6.137.mshv1",`
	`8405`	`+ "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/kata/6.6.137.mshv1.tar.gz"`
`8406`	`8406`	`}`
`8407`	`8407`	`}`
`8408`	`8408`	`},`
`@@ -8431,8 +8431,8 @@`
`8431`	`8431`	`"type": "other",`
`8432`	`8432`	`"other": {`
`8433`	`8433`	`"name": "kernel-uvm",`
`8434`		`- "version": "6.6.130.mshv1",`
`8435`		`- "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/kata-uvm/6.6.130.mshv1.tar.gz"`
	`8434`	`+ "version": "6.6.137.mshv1",`
	`8435`	`+ "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/kata-uvm/6.6.137.mshv1.tar.gz"`
`8436`	`8436`	`}`
`8437`	`8437`	`}`
`8438`	`8438`	`},`