# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-227.el10]
changelog:
  - PCI/PTM: Drop pci_enable_ptm() granularity parameter (CKI Backport Bot) [RHEL-172222]
  - x86/mce: Remove the redundant mce_hygon_feature_init() (Steve Best) [RHEL-130026]
  - x86/mce: Ensure user polling settings are honored when restarting timer (Steve Best) [RHEL-130026]
  - x86/mce/amd: Fix threshold limit reset (Steve Best) [RHEL-130026]
  - x86/mce/apei: Handle variable SMCA BERT record size (Steve Best) [RHEL-130026]
  - x86/mce/mcelog: Use xchg() to get and clear the flags (Steve Best) [RHEL-130026]
  - x86/mce/inject: Remove call to mce_notify_irq() (Steve Best) [RHEL-130026]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Steve Best) [RHEL-130026]
  - x86/mce/threshold: Remove the redundant this_cpu_dec_return() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients (Steve Best) [RHEL-130026]
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs (Steve Best) [RHEL-130026]
  - x86/mce: Handle AMD threshold interrupt storms (Steve Best) [RHEL-130026]
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Add support for physical address valid bit (Steve Best) [RHEL-130026]
  - EDAC/mce_amd: Add support for FRU text in MCA (Steve Best) [RHEL-130026]
  - x86/mce: Save and use APEI corrected threshold limit (Steve Best) [RHEL-130026]
  - x86/mce/amd: Define threshold restart function for banks (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove redundant reset_block() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Support SMCA Corrected Error Interrupt (Steve Best) [RHEL-130026]
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD DFR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD THR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/mce: Add a clear_bank() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' (Steve Best) [RHEL-130026]
  - x86/mce: Move machine_check_poll() status checks to helper functions (Steve Best) [RHEL-130026]
  - x86/mce: Separate global and per-CPU quirks (Steve Best) [RHEL-130026]
  - x86/mce: Convert family/model mixed checks to VFM-based checks (Steve Best) [RHEL-130026]
  - x86/mce: Do 'UNKNOWN' vendor check early (Steve Best) [RHEL-130026]
  - x86/mce: Break up __mcheck_cpu_apply_quirks() (Steve Best) [RHEL-130026]
  - x86/mce: Make four functions return bool (Steve Best) [RHEL-130026]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only SMCA init (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only init (Steve Best) [RHEL-130026]
  - x86/mce: Set CR4.MCE last during init (Steve Best) [RHEL-130026]
  - x86/mce: Remove __mcheck_cpu_init_early() (Steve Best) [RHEL-130026]
  - x86/mce: Cleanup bank processing on init (Steve Best) [RHEL-130026]
  - x86/mce/amd: Put list_head in threshold_bank (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove smca_banks_map (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Rename threshold restart function (Steve Best) [RHEL-130026]
  - x86/msr: Convert __rdmsr() uses to native_rdmsrq() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Convert __wrmsr() uses to native_wrmsr{,q}() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Add the native_rdmsrq() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'native_wrmsrl()' to 'native_wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' (Steve Best) [RHEL-130026]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on 'u32' MSR indices in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on u64 in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Harmonize the prototype and definition of do_trace_rdpmc() (Steve Best) [RHEL-130026]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161187]
  - io_uring/kbuf: limit legacy provided buffer lists to USHRT_MAX (Jeff Moyer) [RHEL-161187]
  - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-167985]
  - platform/x86/intel/pmc: Remove double empty line (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Enable substate residencies for multiple PMCs (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Move LPM mode attributes to PMC (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Change LPM mode fields to u8 (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Improve function to show substate header (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (Steve Best) [RHEL-129781]
  - redhat: configs: Enable CONFIG_SENSORS_SPD5118 (Jennifer Berringer) [RHEL-168906]
  - i3c: master: dw-i3c: Balance PM runtime usage count on probe failure (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Detect and support 16-bit register addressing (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Support 16-bit addressing for NVMEM accesses (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Name chips taking the specification literally (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Split into common and I2C specific code (Jennifer Berringer) [RHEL-168906]
  - hwmon: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Disable runtime PM on Agilex5 to avoid bus hang on IBI (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add shutdown support to dw_i3c_master driver (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add quirk to address OD/PP timing issue on AMD platform (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add support for AMDI0015 ACPI ID (Jennifer Berringer) [RHEL-168906]
  - i3c: simplify combined i3c/i2c dependencies (Jennifer Berringer) [RHEL-168906]
  - i3c: Move device name assignment after i3c_bus_init (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Simplify with scoped for each OF child loop (Jennifer Berringer) [RHEL-168906]
  - i3c: fix refcount inconsistency in i3c_master_register (Jennifer Berringer) [RHEL-168906]
  - device property: Add scoped fwnode child node iterators (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Drop duplicate check before calling OF APIs (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Improve initialization of numbered I2C adapters (Jennifer Berringer) [RHEL-168906]
  - thermal: intel: int340x: soc_slider: Set offset only for balanced mode (Steve Best) [RHEL-130009]
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure (Steve Best) [RHEL-130009]
  - drivers: thermal: intel: tcc_cooling: Drop redundant local variable (Steve Best) [RHEL-130009]
  - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (Steve Best) [RHEL-130009]
  - thermal: intel: Use sysfs_emit() in a sysfs show function (Steve Best) [RHEL-130009]
  - thermal: intel: fix typo "nagative" in comment for cpu argument (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use sysfs_emit{_at}() in sysfs show functions (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Enable slow workload type hints (Steve Best) [RHEL-130009]
  - thermal: intel: intel_pch_thermal: Drop explicit driver data clearing (Steve Best) [RHEL-130009]
  - thermal: intel: intel_tcc_cooling: Add CPU models in the support list (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Wildcat Lake (Steve Best) [RHEL-130009]
  - ACPI: DPTF: Support Nova Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add DLVR support for Nova Lake (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Add Nova Lake processor thermal device (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use symbolic constant for UUID comparison (Steve Best) [RHEL-130009]
  - thermal: intel: Select INT340X_THERMAL from INTEL_SOC_DTS_THERMAL (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Power Slider: Validate slider_balance range (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter to change slider offset (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter for balanced Slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Panther Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add support for power slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Remove redundant acpi_has_method() call (Steve Best) [RHEL-130009]
  - tools/power/x86/intel-speed-select: v1.25 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Allow non root users (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Optimize suspend/resume callbacks (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Check for admin capability for write commands (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Store and restore all domains data (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Add missing write block check (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Use pkg-config for libnl-3.0 detection (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: v1.24 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Reset isst_turbo_freq_info for invalid buckets (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Check feature status (Krzysztof Pawlinski) [RHEL-133093]
  - rh_message.h: update support status of mlx5 devices (Scott Weaver) [RHEL-142605 RHEL-142608 RHEL-166116]
  - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (Charles Mirabile) [RHEL-154155]
  - x86/resctrl: Fix SNC detection (Phil Auld) [RHEL-147186]
  - x86/topo: Fix SNC topology mess (Phil Auld) [RHEL-147186]
  - x86/topo: Replace x86_has_numa_in_package (Phil Auld) [RHEL-147186]
  - x86/topo: Add topology_num_nodes_per_package() (Phil Auld) [RHEL-147186]
  - x86/numa: Store extra copy of numa_nodes_parsed (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Phil Auld) [RHEL-145610]
  - sched/core: Fix wakeup_preempt's next_class tracking (Phil Auld) [RHEL-147186]
  - sched/fair: Only set slice protection at pick time (Phil Auld) [RHEL-147186]
  - sched/eevdf: Update se->vprot in reweight_entity() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix lag clamp (Phil Auld) [RHEL-147186]
  - sched/fair: Fix zero_vruntime tracking (Phil Auld) [RHEL-147186]
  - sched/clock: Avoid false sharing for sched_clock_irqtime (Phil Auld) [RHEL-147186]
  - sched/rt: Skip currently executing CPU in rto_next_cpu() (Phil Auld) [RHEL-147186]
  - sched/cpufreq: Use %pe format for PTR_ERR() printing (Phil Auld) [RHEL-147186]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Phil Auld) [RHEL-147186]
  - sched/debug: Fix dl_server (re)start conditions (Phil Auld) [RHEL-147186]
  - sched/debug: Add support to change sched_ext server params (Phil Auld) [RHEL-147186]
  - sched_ext: Add a DL server for sched_ext tasks (Phil Auld) [RHEL-147186]
  - sched/debug: Stop and start server based on if it was active (Phil Auld) [RHEL-147186]
  - sched/deadline: Clear the defer params (Phil Auld) [RHEL-147186]
  - sched/debug: Fix updating of ppos on server write ops (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix 'stuck' dl_server (Phil Auld) [RHEL-147186]
  - sched/fair: Revert force wakeup preemption (Phil Auld) [RHEL-147186]
  - sched/fair: Disable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched: Update rq->avg_idle when a task is moved to an idle CPU (Phil Auld) [RHEL-147186]
  - sched/debug: Convert copy_from_user() + kstrtouint() to kstrtouint_from_user() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix pelt clock sync when entering idle (Phil Auld) [RHEL-147186]
  - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (Phil Auld) [RHEL-147186]
  - sched/fair: Change likelyhood of nohz.nr_cpus (Phil Auld) [RHEL-147186]
  - sched/fair: Fix math notation errors in avg_vruntime comment (Phil Auld) [RHEL-147186]
  - sched/fair: Move checking for nohz cpus after time check (Phil Auld) [RHEL-147186]
  - sched: Audit MOVE vs balance_callbacks (Phil Auld) [RHEL-147186]
  - sched: Deadline has dynamic priority (Phil Auld) [RHEL-147186]
  - sched/deadline: Use ENQUEUE_MOVE to allow priority change (Phil Auld) [RHEL-147186]
  - sched/deadline: Ensure get_prio_dl() is up-to-date (Phil Auld) [RHEL-147186]
  - sched/deadline: Avoid double update_rq_clock() (Phil Auld) [RHEL-147186]
  - sched: Fold rq-pin swizzle into __balance_callbacks() (Phil Auld) [RHEL-147186]
  - sched: Provide idle_rq() helper (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix server stopping with runnable tasks (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix potential race in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/deadline: Remove unnecessary comment in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Drop useless cpumask_empty() in find_energy_efficient_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Simplify task_numa_find_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Use cpumask_weight_and() in sched_balance_find_dst_group() (Phil Auld) [RHEL-147186]
  - sched: Reorder some fields in struct rq (Phil Auld) [RHEL-147186]
  - sched/fair: Fix sched_avg fold (Phil Auld) [RHEL-147186]
  - sched: Fix faulty assertion in sched_change_end() (Phil Auld) [RHEL-147186]
  - sched/core: Rework sched_class::wakeup_preempt() and rq_modified_*() (Phil Auld) [RHEL-147186]
  - sched_ext: Rename pnt_seq to kick_sync (Phil Auld) [RHEL-147186]
  - sched_ext: Don't kick CPUs running higher classes (Phil Auld) [RHEL-147186]
  - sched_ext: Fix SCX_KICK_WAIT to work reliably (Phil Auld) [RHEL-147186]
  - sched_ext: Allow forcibly picking an scx task (Phil Auld) [RHEL-147186]
  - sched_ext: fix flag check for deferred callbacks (Phil Auld) [RHEL-147186]
  - sched/ext: Fold balance_scx() into pick_task_scx() (Phil Auld) [RHEL-147186]
  - sched_ext: defer queue_balance_callback() until after ops.dispatch (Phil Auld) [RHEL-147186]
  - sched_ext: Move internal type and accessor definitions to ext_internal.h (Phil Auld) [RHEL-147186]
  - sched_ext: Make explicit scx_task_iter_relock() calls unnecessary (Phil Auld) [RHEL-147186]
  - sched/fair: Join two #ifdef CONFIG_FAIR_GROUP_SCHED blocks (Phil Auld) [RHEL-147186]
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics (Phil Auld) [RHEL-147186]
  - sched/fair: Sort out 'blocked_load*' namespace noise (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight (Phil Auld) [RHEL-147186]
  - sched/fair: Clean up comments in 'struct cfs_rq' (Phil Auld) [RHEL-147186]
  - sched/fair: Fold the sched_avg update (Phil Auld) [RHEL-147186]
  - <linux/compiler_types.h>: Add the __signed_scalar_typeof() helper (Phil Auld) [RHEL-147186]
  - sched/fair: Remove superfluous rcu_read_lock() (Phil Auld) [RHEL-147186]
  - sched/fair: Avoid rq->lock bouncing in sched_balance_newidle() (Phil Auld) [RHEL-147186]
  - sched/fair: Switch to rcu_dereference_all() (Phil Auld) [RHEL-147186]
  - sched/headers: Rename rcu_dereference_check_sched_domain() => rcu_dereference_sched_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Limit hrtick work (Phil Auld) [RHEL-147186]
  - sched/core: Add assertions to QUEUE_CLASS (Phil Auld) [RHEL-147186]
  - sched/core: Fix psi_dequeue() for Proxy Execution (Phil Auld) [RHEL-147186]
  - sched/headers: Remove whitespace noise from kernel/sched/sched.h (Phil Auld) [RHEL-147186]
  - sched/rt: Remove a preempt-disable section in rt_mutex_setprio() (Phil Auld) [RHEL-147186]
  - sched/deadline: Walk up cpuset hierarchy to decide root domain when hot-unplug (Phil Auld) [RHEL-147186]
  - cgroup/cpuset: Introduce cpuset_cpus_allowed_locked() (Phil Auld) [RHEL-147186]
  - sched/fair: Enable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals (Phil Auld) [RHEL-147186]
  - sched/deadline: Use cpumask_weight_and() in dl_bw_cpus (Phil Auld) [RHEL-147186]
  - sched/deadline: Minor cleanup in select_task_rq_dl() (Phil Auld) [RHEL-147186]
  - sched/deadline: Document dl_server (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server stop condition (Phil Auld) [RHEL-147186]
  - sched/eevdf: Fix min_vruntime vs avg_vruntime (Phil Auld) [RHEL-147186]
  - sched: Fix proxy/current (push,pull)ability (Phil Auld) [RHEL-147186]
  - sched: Start blocked_on chain processing in find_proxy_task() (Phil Auld) [RHEL-147186]
  - sched: Add an initial sketch of the find_proxy_task() function (Phil Auld) [RHEL-147186]
  - sched: Fix runtime accounting w/ split exec & sched contexts (Phil Auld) [RHEL-147186]
  - sched: Move update_curr_task logic into update_curr_se (Phil Auld) [RHEL-147186]
  - configs: Make sure PROXY_EXEC is off (Phil Auld) [RHEL-147186]
  - sched: Add CONFIG_SCHED_PROXY_EXEC & boot argument to enable/disable (Phil Auld) [RHEL-147186]
  - locking/mutex: Rework task_struct::blocked_on (Phil Auld) [RHEL-147186]
  - sched/core: Remove double update_rq_clock() in __set_cpus_allowed_ptr_locked() (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-147186]
  - sched/core: Optimize core cookie matching check (Phil Auld) [RHEL-147186]
  - sched/core: Add comment explaining force-idle vruntime snapshots (Phil Auld) [RHEL-147186]
  - sched/proxy: Yield the donor task (Phil Auld) [RHEL-147186]
  - sched: Fix the do_set_cpus_allowed() locking fix (Phil Auld) [RHEL-147186]
  - sched: Remove never used code in mm_cid_get() (Phil Auld) [RHEL-147186]
  - sched: Detect per-class runqueue changes (Phil Auld) [RHEL-147186]
  - sched: Add support to pick functions to take rf (Phil Auld) [RHEL-147186]
  - sched: Match __task_rq_{,un}lock() (Phil Auld) [RHEL-147186]
  - sched: Mandate shared flags for sched_change (Phil Auld) [RHEL-147186]
  - sched: Cleanup the sched_change NOCLOCK usage (Phil Auld) [RHEL-147186]
  - sched: Make __do_set_cpus_allowed() use the sched_change pattern (Phil Auld) [RHEL-147186]
  - sched: Rename do_set_cpus_allowed() (Phil Auld) [RHEL-147186]
  - sched: Add locking comments to sched_class methods (Phil Auld) [RHEL-147186]
  - sched: Move sched_class::prio_changed() into the change pattern (Phil Auld) [RHEL-147186]
  - sched: Fix do_set_cpus_allowed() locking (Phil Auld) [RHEL-147186]
  - sched: Fix migrate_disable_switch() locking (Phil Auld) [RHEL-147186]
  - sched/deadline: Prepare for switched_from() change (Phil Auld) [RHEL-147186]
  - sched: Cleanup sched_delayed handling for class switches (Phil Auld) [RHEL-147186]
  - sched: Fold sched_class::switch{ing,ed}_{to,from}() into the change pattern (Phil Auld) [RHEL-147186]
  - sched/fair: Only update stats for allowed CPUs when looking for dst group (Phil Auld) [RHEL-147186]
  - sched: Employ sched_change guards (Phil Auld) [RHEL-147186]
  - cleanup: Fix documentation build error for ACQUIRE updates (Phil Auld) [RHEL-147186]
  - tools/testing: add linux/args.h header and fix radix, VMA tests (Phil Auld) [RHEL-147186]
  - cleanup: Introduce ACQUIRE() and ACQUIRE_ERR() for conditional locks (Phil Auld) [RHEL-147186]
  - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Phil Auld) [RHEL-147186]
  - sched: Re-arrange the {EN,DE}QUEUE flags (Phil Auld) [RHEL-147186]
  - sched/topology,x86: Fix build warning (Phil Auld) [RHEL-147186]
  - sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode (Phil Auld) [RHEL-147186]
  - sched/fair: Forfeit vruntime on yield (Phil Auld) [RHEL-147186]
  - sched/deadline: only set free_cpus for online runqueues (Phil Auld) [RHEL-147186]
  - sched: Create architecture specific sched domain distances (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix race in push_dl_task() (Phil Auld) [RHEL-147186]
  - vfio/nvgrace-gpu: register device memory for poison handling (Aristeu Rozanski) [RHEL-73608]
  - mm: add stubs for PFNMAP memory failure registration functions (Aristeu Rozanski) [RHEL-73608]
  - mm: fixup pfnmap memory failure handling to use pgoff (Aristeu Rozanski) [RHEL-73608]
  - mm: handle poisoning of pfn without struct pages (Aristeu Rozanski) [RHEL-73608]
  - mm: change ghes code to allow poison of non-struct pfn (Aristeu Rozanski) [RHEL-73608]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
changelog:
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Ramesh Chhetri) [RHEL-174629]
  - s390/entry: Scrub r12 register on kernel entry (Ramesh Chhetri) [RHEL-174629]
  - bitmap: introduce bitmap_weighted_xor() (Michal Schmidt) [RHEL-174745]
  - bitmap: add test_zero_nbits() (Michal Schmidt) [RHEL-174745]
  - bitmap: exclude nbits == 0 cases from bitmap test (Michal Schmidt) [RHEL-174745]
  - bitmap: test bitmap_weight() for more (Michal Schmidt) [RHEL-174745]
  - bitmap: add bitmap_weight_from() (Michal Schmidt) [RHEL-174745]
  - bitmap: align test_bitmap output (Michal Schmidt) [RHEL-174745]
  - bitmap: switch test to scnprintf("%*pbl") (Michal Schmidt) [RHEL-174745]
  - bitmap: Add test for out-of-boundary modifications for scatter & gather (Michal Schmidt) [RHEL-174745]
  - cpumask: Introduce cpumask_weighted_or() (Michal Schmidt) [RHEL-174745]
  - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Michal Schmidt) [RHEL-174745]
  - bitmap: remove _check_eq_u32_array (Michal Schmidt) [RHEL-174745]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-172305]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-172305]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172748] {CVE-2026-43051}
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164228]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164228]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164228]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100932]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100932]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100932]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100932]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100932]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100932]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100932]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100932]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100932]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100932]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100932]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100932]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100932]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100932]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100932]
  - s390/pfault: Fix virtual vs physical address confusion (Mircea Dragan) [RHEL-170908]
  - lib/vsprintf: Add specifier for printing struct timespec64 (CKI Backport Bot) [RHEL-172105]
  - RDMA/rw: Fix MR pool exhaustion in bvec RDMA READ path (Kamal Heib) [RHEL-163515]
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Import DMA-BUF module in uverbs_std_types_dmabuf file (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check id_priv->restricted_node_type in cma_listen_on_dev() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: select CONFIG_DMA_SHARED_BUFFER (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add DMABUF object type and operations (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Support external FD uobjects (Kamal Heib) [RHEL-163515]
  - RDMA/core: introduce rdma_restrict_node_type() (Kamal Heib) [RHEL-163515]
  - RDMA/umem: don't abuse current->group_leader (Kamal Heib) [RHEL-163515]
  - IB/core: Extend rate limit support for RC QPs (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163515]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163515]
  - RDMA/core: add MR support for bvec-based RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: use IOVA-based DMA mapping for bvec RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: add bio_vec based RDMA read/write API (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163515]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163515]
  - RDMA/core: Avoid exporting module local functions and remove not-used ones (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Remove redundant DMABUF ops check (Kamal Heib) [RHEL-163515]
  - IB/core: Add query_port_speed verb (Kamal Heib) [RHEL-163515]
  - IB/core: Refactor rate_show to use ib_port_attr_to_rate() (Kamal Heib) [RHEL-163515]
  - IB/core: Add helper to convert port attributes to data rate (Kamal Heib) [RHEL-163515]
  - IB/core: Add async event on device speed change (Kamal Heib) [RHEL-163515]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163515]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Fix rdma_ucm_query_ib_service_resp struct padding (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163515]
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release (Kamal Heib) [RHEL-163515]
  - RDMA/core: Add new IB rate for XDR (8x) support (Kamal Heib) [RHEL-163515]
  - RDMA/core: Prevent soft lockup during large user memory region cleanup (Kamal Heib) [RHEL-163515]
  - RDMA/restrack: Fix typos in the comments (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Correct typedef and bad line warnings (Kamal Heib) [RHEL-163515]
  - IB/isert: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/iser: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/rdmavt: rdmavt_qp.h: clean up kernel-doc comments (Kamal Heib) [RHEL-163515]
  - RDMA/core: WQ_PERCPU added to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: fix some kernel-doc warnings (Kamal Heib) [RHEL-163515]
  - RDMA/core: let rdma_connect_locked() call lockdep_assert_held(&id_priv->handler_mutex) (Kamal Heib) [RHEL-163515]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-163515]
  - IB/ipoib: Ignore L3 master device (Kamal Heib) [RHEL-163515]
  - RDMA/core: Use route entry flag to decide on loopback traffic (Kamal Heib) [RHEL-163515]
  - RDMA/core: Squash a single user static function (Kamal Heib) [RHEL-163515]
  - RDMA/core: fix "truely"->"truly" (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support write an event into a CM (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support query resolved service records (Kamal Heib) [RHEL-163515]
  - RDMA/cma: Support IB service record resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Support IB service records resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Add RMPP support for SA queries (Kamal Heib) [RHEL-163515]
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-165161]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-171979]
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-159000]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Jerry Snitselaar) [RHEL-160189]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Jerry Snitselaar) [RHEL-160189]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169737] {CVE-2025-68183}
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-147247]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158967]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-164699]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-164699]
  - net/ipv6: Remove HBH helpers (Michal Schmidt) [RHEL-156515]
  - net: mana: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - gve: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - bnxt_en: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - ice: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx4: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx5e: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on RX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on TX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Introduce payload_len helpers (Michal Schmidt) [RHEL-156515]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161120] {CVE-2025-68741}
  - selftests/bpf: Add test to verify the fix of kprobe_write_ctx abuse (Ines Qian) [RHEL-78291]
  - bpf: Fix abuse of kprobe_write_ctx via freplace (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix kprobe multi stacktrace_ips test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace ips test for kprobe_multi/kretprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove hexdump dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove xxd util dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Skip livepatch test when prerequisites are missing (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for livepatch + bpf trampoline (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for exclusive maps (Ines Qian) [RHEL-78291]
  - bpf: Require frozen map for calculating map hash (Ines Qian) [RHEL-78291]
  - bpf: Limit bpf program signature size (Ines Qian) [RHEL-78291]
  - bpf: Fix exclusive map memory leak (Ines Qian) [RHEL-78291]
  - selftests/bpf: Allow selftests to build with older xxd (Ines Qian) [RHEL-78291]
  - bpftool: Allow bpftool to build with openssl < 3 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Update test_tag to use sha256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test widen_imprecise_scalars() with different stack depth (Ines Qian) [RHEL-78291]
  - bpf: account for current allocated stack depth in widen_imprecise_scalars() (Ines Qian) [RHEL-78291]
  - bpf: add _impl suffix for bpf_stream_vprintk() kfunc (Ines Qian) [RHEL-78291]
  - bpf:add _impl suffix for bpf_task_work_schedule* kfuncs (Ines Qian) [RHEL-78291]
  - bpf: Conditionally include dynptr copy kfuncs (Ines Qian) [RHEL-78291]
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Ines Qian) [RHEL-78291]
  - bpf: Sync pending IRQ work before freeing ring buffer (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix redefinition of 'off' as different kind of symbol (Ines Qian) [RHEL-78291]
  - bpf: Fix memory leak in __lookup_instance error path (Ines Qian) [RHEL-78291]
  - selftests: arg_parsing: Ensure data is flushed to disk before reading. (Ines Qian) [RHEL-78291]
  - selftests/bpf: make arg_parsing.c more robust to crashes (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for unpinning htab with internal timer struct (Ines Qian) [RHEL-78291]
  - bpf: Avoid RCU context warning when unpinning htab with internal structs (Ines Qian) [RHEL-78291]
  - libbpf: Fix undefined behavior in {get,put}_unaligned_be32() (Ines Qian) [RHEL-78291]
  - bpf: Finish constification of 1st parameter of bpf_d_path() (Ines Qian) [RHEL-78291]
  - libbpf: Fix missing #pragma in libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - bpf: Reject negative offsets for ALU ops (Ines Qian) [RHEL-78291]
  - libbpf: remove linux/unaligned.h dependency for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_sha256() implementation into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_errstr() into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: remove unused libbpf_strerror_r and STRERR_BUFSIZE (Ines Qian) [RHEL-78291]
  - libbpf: make libbpf_errno.c into more generic libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix realloc size in bpf_get_addrs (Ines Qian) [RHEL-78291]
  - libbpf: Replace AF_ALG with open coded SHA-256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stress test for rqspinlock in NMI (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test case for different expected_attach_type (Ines Qian) [RHEL-78291]
  - bpf: Enforce expected_attach_type for tailcall compatibility (Ines Qian) [RHEL-78291]
  - bpftool: Remove duplicate string.h header (Ines Qian) [RHEL-78291]
  - bpf: Remove duplicate crypto/sha2.h header (Ines Qian) [RHEL-78291]
  - libbpf: Fix error when st-prefix_ops and ops from differ btf (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace map lookup_and_delete_elem test case (Ines Qian) [RHEL-78291]
  - selftests/bpf: Refactor stacktrace_map case with skeleton (Ines Qian) [RHEL-78291]
  - bpf: Add lookup_and_delete_elem for BPF_MAP_STACK_TRACE (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix flaky bpf_cookie selftest (Ines Qian) [RHEL-78291]
  - selftests/bpf: Task_work selftest cleanup fixes (Ines Qian) [RHEL-78291]
  - bpf: Mark kfuncs as __noclone (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe multi write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context ip register change test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context registers changes test (Ines Qian) [RHEL-78291]
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Ines Qian) [RHEL-78291]
  - bpf: Allow uprobe program to change context registers (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for program signing options (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add union argument tests using fexit programs (Ines Qian) [RHEL-78291]
  - bpf: Allow union argument in trampoline based programs (Ines Qian) [RHEL-78291]
  - selftests: bpf: Add tests for signed loads from arena (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - bpf, x86: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - selftests/bpf: add bpf task work stress tests (Ines Qian) [RHEL-78291]
  - selftests/bpf: BPF task work scheduling tests (Ines Qian) [RHEL-78291]
  - bpf: task work scheduling kfuncs (Ines Qian) [RHEL-78291]
  - bpf: extract map key pointer calculation (Ines Qian) [RHEL-78291]
  - bpf: bpf task work plumbing (Ines Qian) [RHEL-78291]
  - bpf: verifier: permit non-zero returns from async callbacks (Ines Qian) [RHEL-78291]
  - bpf: htab: extract helper for freeing special structs (Ines Qian) [RHEL-78291]
  - bpf: extract generic helper from process_timer_func() (Ines Qian) [RHEL-78291]
  - bpf: refactor special field-type detection (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable signature verification for some lskel tests (Ines Qian) [RHEL-78291]
  - bpftool: Add support for signing BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Embed and verify the metadata hash in the loader (Ines Qian) [RHEL-78291]
  - libbpf: Update light skeleton for signing (Ines Qian) [RHEL-78291]
  - bpf: Implement signature verification for BPF programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix selftest verifier_arena_large failure (Ines Qian) [RHEL-78291]
  - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 (Ines Qian) [RHEL-78291]
  - bpftool: Fix UAF in get_delegate_value (Ines Qian) [RHEL-78291]
  - bpftool: Add HELP_SPEC_OPTIONS in token.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: test cases for callchain sensitive live stack tracking (Ines Qian) [RHEL-78291]
  - selftests/bpf: __not_msg() tag for test_loader framework (Ines Qian) [RHEL-78291]
  - bpf: table based bpf_insn_successors() (Ines Qian) [RHEL-78291]
  - bpf: disable and remove registers chain based liveness (Ines Qian) [RHEL-78291]
  - bpf: signal error if old liveness is more conservative than new (Ines Qian) [RHEL-78291]
  - bpf: enable callchain sensitive stack liveness tracking (Ines Qian) [RHEL-78291]
  - bpf: callchain sensitive stack liveness tracking using CFG (Ines Qian) [RHEL-78291]
  - bpf: compute instructions postorder per subprogram (Ines Qian) [RHEL-78291]
  - bpf: declare a few utility functions as internal api (Ines Qian) [RHEL-78291]
  - bpf: remove redundant REG_LIVE_READ check in stacksafe() (Ines Qian) [RHEL-78291]
  - bpf: use compute_live_registers() info in clean_func_state (Ines Qian) [RHEL-78291]
  - bpf: bpf_verifier_state->cleaned flag instead of REG_LIVE_DONE (Ines Qian) [RHEL-78291]
  - bpf: Move the signature kfuncs to helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Return hashes of maps in BPF_OBJ_GET_INFO_BY_FD (Ines Qian) [RHEL-78291]
  - libbpf: Support exclusive map creation (Ines Qian) [RHEL-78291]
  - libbpf: Implement SHA256 internal helper (Ines Qian) [RHEL-78291]
  - bpf: Implement exclusive map creation (Ines Qian) [RHEL-78291]
  - bpf: Update the bpf_prog_calc_tag to use SHA256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf: Enforce RCU protection for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() (Ines Qian) [RHEL-78291]
  - bpf...d_path(): constify path argument (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Ines Qian) [RHEL-78291]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Ines Qian) [RHEL-78291]
  - bpftool: Search for tracefs at /sys/kernel/tracing first (Ines Qian) [RHEL-78291]
  - selftests/bpf: More open-coded gettid syscall cleanup (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for arena fault reporting (Ines Qian) [RHEL-78291]
  - selftests: bpf: use __stderr in stream error tests (Ines Qian) [RHEL-78291]
  - selftests: bpf: introduce __stderr and __stdout (Ines Qian) [RHEL-78291]
  - bpf: Report arena faults to BPF stderr (Ines Qian) [RHEL-78291]
  - bpf: core: introduce main_prog_aux for stream access (Ines Qian) [RHEL-78291]
  - bpf: arm64: simplify exception table handling (Ines Qian) [RHEL-78291]
  - bpf: WQ_PERCPU added to alloc_workqueue users (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_unbound_wq with system_dfl_wq (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_wq with system_percpu_wq (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix the issue where the error code is 0 (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_ATOMIC instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Introduce bpf_jit_emit_atomic_ops() to emit atomic instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement bpf_addr_space_cast instruction (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_MEM32 pseudo instructions (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add BPF program dump in veristat (Ines Qian) [RHEL-78291]
  - libbpf: Remove unused args in parse_usdt_note (Ines Qian) [RHEL-78291]
  - bpf, arm64: Remove duplicated bpf_flush_icache() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test kfunc bpf_strcasecmp (Ines Qian) [RHEL-78291]
  - bpf: add bpf_strcasecmp kfunc (Ines Qian) [RHEL-78291]
  - selftests/bpf: add benchmark testing for kprobe-multi-all (Ines Qian) [RHEL-78291]
  - selftests/bpf: skip recursive functions for kprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: move get_ksyms and get_addrs to trace_helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpftool: Add CET-aware symbol matching for x86_64 architectures (Ines Qian) [RHEL-78291]
  - bpftool: Refactor kernel config reading into common helper (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add LPM trie microbenchmarks (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto tests for arm64 (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enrich subtest_basic_usdt case in selftests to cover SIB handling logic (Ines Qian) [RHEL-78291]
  - libbpf: Fix USDT SIB argument handling causing unrecognized register error (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix typos and grammar in test sources (Ines Qian) [RHEL-78291]
  - bpf: Add selftest to check the verifier's abstract multiplication (Ines Qian) [RHEL-78291]
  - bpf: Improve the general precision of tnum_mul (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove may_goto tests from DENYLIST.s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto verifier tests on s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add __arch_s390x macro (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a missing newline to the "bad arch spec" message (Ines Qian) [RHEL-78291]
  - s390/bpf: Add s390 JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove entries from config.{arch} already present in config (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for trampoline.c (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_prog_run_array_cg() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_task_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_iter_run_prog() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_inode_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_cgrp_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: Use sha1() instead of sha1_transform() in bpf_prog_calc_tag() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Tests for is_scalar_branch_taken tnum logic (Ines Qian) [RHEL-78291]
  - bpf: Use tnums for JEQ/JNE is_branch_taken logic (Ines Qian) [RHEL-78291]
  - selftests/bpf: Use vmlinux.h for BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Add documentation to version and error API functions (Ines Qian) [RHEL-78291]
  - s390/bpf: Use direct calls and jumps where possible (Ines Qian) [RHEL-78291]
  - bpftool: Add kernel.kptr_restrict hint for no instructions (Ines Qian) [RHEL-78291]
  - bpf: Add a verbose message when the BTF limit is reached (Ines Qian) [RHEL-78291]
  - bpf: Replace get_next_cpu() with cpumask_next_wrap() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for DEVMAP reuse (Ines Qian) [RHEL-78291]
  - libbpf: Fix reuse of DEVMAP (Ines Qian) [RHEL-78291]
  - bpf: Remove migrate_disable in kprobe_multi_link_prog_run (Ines Qian) [RHEL-78291]
  - selftests/bpf: Copy test_kmods when installing selftest (Ines Qian) [RHEL-78291]
  - bpf: Don't use %pK through printk (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpf: Remove redundant __GFP_NOWARN (Ines Qian) [RHEL-78291]
  - bpf: Standardize function declaration style (Ines Qian) [RHEL-78291]
  - bpf: removed unused 'env' parameter from is_reg64 and insn_has_def32 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test multi_st_ops and calling kfuncs from different programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add multi_st_ops that supports multiple instances (Ines Qian) [RHEL-78291]
  - bpf: Allow struct_ops to get map id by kdata (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for token argument (Ines Qian) [RHEL-78291]
  - bpftool: Add bpftool-token manpage (Ines Qian) [RHEL-78291]
  - bpftool: Add bpf_token show (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test concurrent task local data key creation (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test basic task local data operations (Ines Qian) [RHEL-78291]
  - selftests/bpf: Introduce task local data (Ines Qian) [RHEL-78291]
  - bpf: Allow syscall bpf programs to call non-recur helpers (Ines Qian) [RHEL-78291]
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (Charles Haithcock) [RHEL-154387]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-229.el10]
changelog:
  - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176448] {CVE-2026-46333}
  - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174757] {CVE-2026-43303}
  - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171616] {CVE-2026-23375}
  - anon_inode: rework assertions (Rafael Aquini) [RHEL-171616]
  - vfs: use the new debug macros in inode_set_cached_link() (Rafael Aquini) [RHEL-171616]
  - vfs: catch invalid modes in may_open() (Rafael Aquini) [RHEL-171616]
  - vfs: add initial support for CONFIG_DEBUG_VFS (Rafael Aquini) [RHEL-171616]
  - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add open() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add exec() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chmod() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chown() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests: add file SLAB_TYPESAFE_BY_RCU recycling stressor (Rafael Aquini) [RHEL-171616]
  - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171616]
  - coccinelle: kmalloc_obj: Remove default GFP_KERNEL arg (Michal Schmidt) [RHEL-174796]
  - default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (Michal Schmidt) [RHEL-174796]
  - add default_gfp() helper macro and use it in the new *alloc_obj() helpers (Michal Schmidt) [RHEL-174796]
  - coccinelle: Add kmalloc_objs conversion script (Michal Schmidt) [RHEL-174796]
  - slab.h: disable completely broken overflow handling in flex allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_flex() and family (Michal Schmidt) [RHEL-174796]
  - compiler_types: Introduce __flex_counter() and family (Michal Schmidt) [RHEL-174796]
  - checkpatch: Suggest kmalloc_obj family for sizeof allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_obj() and family (Michal Schmidt) [RHEL-174796]
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (David Marlin) [RHEL-172460 RHEL-172865] {CVE-2026-31772}
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-172460]
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-172460]
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate LTK enc_size on load (David Marlin) [RHEL-172460 RHEL-172580] {CVE-2026-43020}
  - Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: move wake reason storage into validated event handlers (David Marlin) [RHEL-172460]
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (David Marlin) [RHEL-172460 RHEL-172607] {CVE-2026-43023}
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_aml: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Enable HFP hardware offload for WCN6855 and WCN7850 (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Refactor HFP hardware offload capability handling (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Remove duplicate entry for 0x13d3/0x3618 (David Marlin) [RHEL-172460]
  - Bluetooth: btintel: Remove unneeded CONFIG_PM* #ifdef's (David Marlin) [RHEL-172460]
  - Bluetooth: btnxpuart: Remove unneeded CONFIG_PM ifdef (David Marlin) [RHEL-172460]
  - Bluetooth: btintel_pcie: Remove unnecessary check before kfree_skb() (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Reject autosuspend if discovery is active (David Marlin) [RHEL-172460]
  - Bluetooth: hci_core: Export hci_discovery_active (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: Fix using PHYs bitfields as PHY value (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: Add WCN6855 firmware priority selection feature (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: move WCN7850 workaround to the caller (David Marlin) [RHEL-172460]
  - Bluetooth: btmtksdio: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: hci_bcm4377: Use generic power management (David Marlin) [RHEL-172460]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174522] {CVE-2026-43284}
  - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-170705]
  - iommu/arm-smmu-v3: Fix typos introduced by arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Do not continue in __arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Perform per-domain invalidations using arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add arm_smmu_invs based arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Populate smmu_domain->invs when attaching masters (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Pre-allocate a per-master invalidation array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Introduce a per-domain arm_smmu_invs array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add an inline arm_smmu_domain_free() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Explicitly set smmu_domain->stage for SVA (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Jerry Snitselaar) [RHEL-88961]
  - sort.h: hoist cmp_int() into generic header file (Jerry Snitselaar) [RHEL-88961]
  - lib/sort.c: add _nonatomic() variants with cond_resched() (Jerry Snitselaar) [RHEL-88961]
  - lib/list_sort: clarify comparison function requirements in list_sort() (Jerry Snitselaar) [RHEL-88961]
  - lib/sort: clarify comparison function requirements in sort_r() (Jerry Snitselaar) [RHEL-88961]
  - cgroup/cpuset: Skip security check for hotplug induced v1 task migration (Waiman Long) [RHEL-160958]
  - cgroup/cpuset: Simplify setsched decision check in task iteration loop of cpuset_can_attach() (Waiman Long) [RHEL-160958]
  - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-93825]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-230.el10]
changelog:
  - powercap: intel_rapl: Add support for Nova Lake processors (Steve Best) [RHEL-117269]
  - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171638]
  - selftests/bpf: Ensure typedef are deduplicated in split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix deduplication of typedef with base definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Remove static qualifier from local subprog pointer (Jerome Marchand) [RHEL-139985]
  - bpf: Fix ld_{abs,ind} failure path analysis in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Propagate error from visit_tailcall_insn (Jerome Marchand) [RHEL-139985]
  - ftrace,bpf: Remove FTRACE_OPS_FL_JMP ftrace_ops flag (Jerome Marchand) [RHEL-139985]
  - ftrace: Fix address for jmp mode in t_show() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add regression test for bpf_d_path() (Jerome Marchand) [RHEL-139985]
  - bpf: Fix verifier assumptions of bpf_d_path's output buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for truncated dmabuf_iter reads (Jerome Marchand) [RHEL-139985]
  - bpf: Fix truncated dmabuf iterator reads (Jerome Marchand) [RHEL-139985]
  - x86/unwind/orc: Support reliable unwinding through BPF stack frames (Jerome Marchand) [RHEL-139985]
  - bpf: Add bpf_has_frame_pointer() (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix -Wdiscarded-qualifiers under C23 (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix build warnings due to MS extensions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add -fms-extensions to bpf build flags (Jerome Marchand) [RHEL-139985]
  - bpf: optimize bpf_map_update_elem() for map-in-map types (Jerome Marchand) [RHEL-139985]
  - bpf: make kprobe_multi_link_prog_run always_inline (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add success stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Precede non-head waiter queueing with AA check (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable spinning for trylock fallback (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Use trylock fallback when per-CPU rqnode is busy (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Perform AA checks immediately (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Enclose lock/unlock within lock entry acquisitions (Jerome Marchand) [RHEL-139985]
  - bpf: Remove runqslower tool (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Remove usage of lsm/file_alloc_security in selftest (Jerome Marchand) [RHEL-139985]
  - bpf: Disable file_alloc_security hook (Jerome Marchand) [RHEL-139985]
  - bpf: check for insn arrays in check_ptr_alignment (Jerome Marchand) [RHEL-139985]
  - bpf: force BPF_F_RDONLY_PROG on insn array creation (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Make CS length configurable for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add lock wait time stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Relax CPU requirements for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - bpf: Introduce internal bpf_map_check_op_flags helper function (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix some incorrect @param descriptions in the comment of libbpf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Call bpf_get_numa_node_id() in trigger_count() (Jerome Marchand) [RHEL-139985]
  - docs: bpf: map_array: Specify BPF_MAP_TYPE_PERCPU_ARRAY value size limit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix htab_update/reenter_update selftest failure (Jerome Marchand) [RHEL-139985]
  - bpf: implement "jmp" mode for trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: specify the old and new poke_type for bpf_arch_text_poke (Jerome Marchand) [RHEL-139985]
  - bpf,x86: adjust the "jmp" mode for bpf trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: fix the usage of BPF_TRAMP_F_SKIP_FRAME (Jerome Marchand) [RHEL-139985]
  - x86/ftrace: Implement DYNAMIC_FTRACE_WITH_JMP (Jerome Marchand) [RHEL-139985]
  - ftrace: Introduce FTRACE_OPS_FL_JMP (Jerome Marchand) [RHEL-139985]
  - bpf: cleanup aux->used_maps after jit (Jerome Marchand) [RHEL-139985]
  - selftests: bpf: Add tests for unbalanced rcu_read_lock (Jerome Marchand) [RHEL-139985]
  - bpf: support nested rcu critical sections (Jerome Marchand) [RHEL-139985]
  - bpf: test the correct stack liveness of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: correct stack liveness for tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: test the proper verification of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: properly verify tail call behavior (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Jerome Marchand) [RHEL-139985]
  - bpf: Document cfi_stubs and owner fields in struct bpf_struct_ops (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names (Jerome Marchand) [RHEL-139985]
  - bpf: don't skip other information if xlated_prog_insns is skipped (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: Move desc->imm setup to sort_kfunc_descs_by_imm_off() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Align kfuncs renamed in bpf tree (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add BTF dedup tests for recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix BTF dedup to support recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix failure paths in send_signal test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Convert glob_match() to bpf arena (Jerome Marchand) [RHEL-139985]
  - bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Jerome Marchand) [RHEL-139985]
  - bpf: Add missing checks to avoid verbose verifier log (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: retry bpf_map_update_elem() when E2BIG is returned (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test to verify freeing the special fields in pcpu maps (Jerome Marchand) [RHEL-139985]
  - bpf: Free special fields when update [lru_,]percpu_hash maps (Jerome Marchand) [RHEL-139985]
  - bpf: Adjust return value for queue destruction in rqspinlock (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add C-level selftests for indirect jumps (Jerome Marchand) [RHEL-139985]
  - libbpf: support llvm-generated indirect jumps (Jerome Marchand) [RHEL-139985]
  - bpf: disasm: add support for BPF_JMP|BPF_JA|BPF_X (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: test instructions arrays with blinding (Jerome Marchand) [RHEL-139985]
  - bpf: support instructions arrays with constants blinding (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add selftests for new insn_array map (Jerome Marchand) [RHEL-139985]
  - libbpf: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpftool: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpf, x86: add new map type: instructions array (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test parsing of (multi-)split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix parsing of multi-split BTF (Jerome Marchand) [RHEL-139985]
  - docs/bpf: Add missing BPF k/uprobe program types to docs (Jerome Marchand) [RHEL-139985]
  - libbpf: Update the comment to remove the reference to the deprecated interface bpf_program__load(). (Jerome Marchand) [RHEL-139985]
  - libbpf: Complete the missing @param and @return tags in btf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - bpf: Skip bounds adjustment for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add ABBCCA case for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable queue destruction for deadlocks (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix intermittent failures in file_reader test (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix the incorrect reference to the memlock_rlim variable in the comment. (Jerome Marchand) [RHEL-139985]
  - libbpf: Optimize the redundant code in the bpf_object__init_user_btf_maps() function. (Jerome Marchand) [RHEL-139985]
  - bpf: Fix stackmap overflow check in __bpf_get_stackid() (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor stack map trace depth calculation into helper function (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix missing closing parethesis for BTF_KIND_UNKN (Jerome Marchand) [RHEL-139985]
  - selftests/bpf/benchs: Add overwrite mode benchmark for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add overwrite mode test for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - bpf: Add overwrite mode for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add file dynptr tests (Jerome Marchand) [RHEL-139985]
  - bpf: dispatch to sleepable file dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: refactor kfunc specialization (Jerome Marchand) [RHEL-139985]
  - bpf: add kfuncs and helpers support for file dynptrs (Jerome Marchand) [RHEL-139985]
  - bpf: add plumbing for file-backed dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: centralize const dynptr check in unmark_stack_slots_dynptr() (Jerome Marchand) [RHEL-139985]
  - bpf: widen dynptr size/offset to 64 bit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: remove unnecessary kfunc prototypes (Jerome Marchand) [RHEL-139985]
  - libbpf: fix formatting of bpf_object__append_subprog_code (Jerome Marchand) [RHEL-139985]
  - bpf: make bpf_insn_successors to return a pointer (Jerome Marchand) [RHEL-139985]
  - bpf: generalize and export map_get_next_key for arrays (Jerome Marchand) [RHEL-139985]
  - bpf: save the start of functions in bpf_prog_aux (Jerome Marchand) [RHEL-139985]
  - bpf: fix the return value of push_stack (Jerome Marchand) [RHEL-139985]
  - bpf: Clarify get_outer_instance() handling in propagate_to_outer_instance() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix list_del() in arena list (Jerome Marchand) [RHEL-139985]
  - samples/bpf: Fix spelling typos in samples/bpf (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22 (Jerome Marchand) [RHEL-139985]
  - bpf: mark vma->{vm_mm,vm_file} as __safe_trusted_or_null (Jerome Marchand) [RHEL-139985]
  - bpf: mark mm->owner as __safe_rcu_or_null (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Silence unused-but-set build warnings (Jerome Marchand) [RHEL-139985]
  - bpf: Consistently use bpf_rcu_lock_held() everywhere (Jerome Marchand) [RHEL-139985]
  - bpf: Extract internal structs validation logic into helpers (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add more bpf_wq tests (Jerome Marchand) [RHEL-139985]
  - bpf: Fix handling maps with no BTF and non-constant offsets for the bpf_wq (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - bpf: add bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for async cb context (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor storage_get_func_atomic to generic non_sleepable flag (Jerome Marchand) [RHEL-139985]
  - bpf: Fix sleepable context for async callbacks (Jerome Marchand) [RHEL-139985]
  - bpf: Cleanup unused func args in rqspinlock implementation (Jerome Marchand) [RHEL-139985]
  - bpf: Add dynptr type for skb metadata (Jerome Marchand) [RHEL-139985]
  - cpufreq/amd-pstate: Add comment explaining nominal_perf usage for performance policy (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Add static asserts for EPP indices (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Fix some whitespace issues (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Adjust return values in amd_pstate_update_status() (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Make amd_pstate_get_mode_string() never return NULL (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Drop NULL value from amd_pstate_mode_string (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Use sysfs_match_string() for epp (Steve Best) [RHEL-127643]
  - efi/cper: Fix cper_bits_to_str buffer handling and return value (Thomas Huth) [RHEL-164371]
  - efi: Wipe INITRD config table from memory after consumption (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Fix EDID support in mixed-mode (Thomas Huth) [RHEL-164371]
  - docs: efi: add CPER functions to driver-api (Thomas Huth) [RHEL-164371]
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Thomas Huth) [RHEL-164371]
  - efi/cper: Add a new helper function to print bitmasks (Thomas Huth) [RHEL-164371]
  - efi/cper: Adjust infopfx size to accept an extra space (Thomas Huth) [RHEL-164371]
  - efi/libstub: x86: Store EDID in boot_params (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Add support for reading EDID (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Initialize screen_info in helper function (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Find GOP handle instead of GOP data (Thomas Huth) [RHEL-164371]
  - efi: Fix trailing whitespace in header file (Thomas Huth) [RHEL-164371]
  - efi/memattr: Convert efi_memattr_init() return type to void (Thomas Huth) [RHEL-164371]
  - efi: stmm: fix kernel-doc "bad line" warnings (Thomas Huth) [RHEL-164371]
  - efi/riscv: Remove the useless failure return message print (Thomas Huth) [RHEL-164371]
  - efistub/x86: Add fallback for SMBIOS record lookup (Thomas Huth) [RHEL-164371]
  - kthread: Warn if mm_struct lacks user_ns in kthread_use_mm() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Don't fail check current_in_efi() if preemptible (Thomas Huth) [RHEL-164371]
  - arm64: efi: Fix NULL pointer dereference by initializing user_ns (Thomas Huth) [RHEL-164371]
  - arm64/efi: Call EFI runtime services without disabling preemption (Thomas Huth) [RHEL-164371]
  - arm64/efi: Move uaccess en/disable out of efi_set_pgd() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Drop efi_rt_lock spinlock from EFI arch wrapper (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Permit kernel mode NEON with IRQs off (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Don't warn when EFI execution context is preemptible (Thomas Huth) [RHEL-164371]
  - efi/runtime-wrappers: Keep track of the efi_runtime_lock owner (Thomas Huth) [RHEL-164371]
  - efi: Add missing static initializer for efi_mm::cpus_allowed_lock (Thomas Huth) [RHEL-164371]
  - efi/libstub: Fix page table access in 5-level to 4-level paging transition (Thomas Huth) [RHEL-164371]
  - platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Introduce new interface to export NPU metrics (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Refactor repetitive BIOS output handling (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Remove redundant ternary operators (Steve Best) [RHEL-127641]
  - hwmon: (k10temp) Add AMD Steam Deck APU ID (Steve Best) [RHEL-127650]
  - hwmon: (k10temp) Add device ID for Strix Halo (Steve Best) [RHEL-127650]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-231.el10]
changelog:
  - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-175521]
  - KVM: arm64: Invert KVM_PGTABLE_WALK_HANDLE_FAULT to fix pKVM walkers (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Fix page leak in user_mem_abort() on atomic fault (Sebastian Ott) [RHEL-151899]
  - kselftest/arm64: Add HWCAP test for FEAT_LS64 (Sebastian Ott) [RHEL-151899]
  - arm64: Add support for FEAT_{LS64, LS64_V} (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for FEAT_PMUv3 (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for cpu debug architecture (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest (Sebastian Ott) [RHEL-151899]
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1 (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle DABT caused by LS64* instructions on unsupported memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add documentation for KVM_EXIT_ARM_LDST64B (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add exit to userspace on {LD,ST}64B* outside of memslots (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that reads to inaccessible guest_memfd VMAs SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that faulting in private guest_memfd memory fails (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrapper macro to handle and assert on expected SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Isolate the guest_memfd Copy-on-Write negative testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrappers for mmap() and munmap() to assert success (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add test coverage for guest_memfd without GUEST_MEMFD_FLAG_MMAP (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Create a new guest_memfd for each testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Stash the host page size in a global in the guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Allow mmap() on guest_memfd for x86 VMs with private memory (Sebastian Ott) [RHEL-151899]
  - KVM: Explicitly mark KVM_GUEST_MEMFD as depending on KVM_GENERIC_MMU_NOTIFIER (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Invalidate SHARED GPAs if gmem supports INIT_SHARED (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add INIT_SHARED flag, reject user page faults if not set (Sebastian Ott) [RHEL-151899]
  - KVM: Rework KVM_CAP_GUEST_MEMFD_MMAP into KVM_CAP_GUEST_MEMFD_FLAGS (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Forward FEAT_XNX permissions to the shadow stage-2 (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add guest_memfd testcase to fault-in on !mmap()'d memory (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: guest_memfd mmap() test when mmap is supported (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Do not use hardcoded page sizes in guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: Allow and advertise support for host mmap() on guest_memfd files (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable support for guest_memfd backed memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Handle VNCR_EL2-triggered faults backed by guest_memfd (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle guest_memfd-backed guest page faults (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Refactor user_mem_abort() (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Handle guest page faults for guest_memfd with shared memory (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Extend guest_memfd's max mapping level to shared mappings (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Enforce guest_memfd's max order when recovering hugepages (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Hoist guest_memfd max level/order helpers "up" in mmu.c (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Rename .private_max_mapping_level() to .gmem_max_mapping_level() (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Track guest_memfd mmap support in memslot (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add plumbing to host to map guest_memfd pages (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Enable KVM_GUEST_MEMFD for all 64-bit builds (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comment that refers to kvm uapi header path (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comments that refer to slots_lock (Sebastian Ott) [RHEL-151899]
  - KVM: Rename kvm_slot_can_be_private() to kvm_slot_has_gmem() (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_GENERIC_PRIVATE_MEM to CONFIG_HAVE_KVM_ARCH_GMEM_POPULATE (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select TDX's KVM_GENERIC_xxx dependencies iff CONFIG_KVM_INTEL_TDX=y (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select KVM_GENERIC_PRIVATE_MEM directly from KVM_SW_PROTECTED_VM (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Have all vendor neutral sub-configs depend on KVM_X86, not just KVM (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_PRIVATE_MEM to CONFIG_KVM_GUEST_MEMFD (Sebastian Ott) [RHEL-151899]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-232.el10]
changelog:
  - PCI: Fix alignment calculation for resource size larger than align (Myron Stowe) [RHEL-151449]
  - PCI: Fix premature removal from realloc_head list during resource assignment (Myron Stowe) [RHEL-151449]
  - PCI: Prevent shrinking bridge window from its required size (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: Document PCIe TLP Header decoder for AER messages (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Fix pci_pwrctrl_is_required() device node leak (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Do not power off on pwrctrl device removal (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Create pwrctrl devices only for PCI device nodes (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Ensure that remote endpoint node parent has supply requirement (Myron Stowe) [RHEL-151449]
  - sparc/PCI: Initialize msi_addr_mask for OF-created PCI devices (Myron Stowe) [RHEL-151449]
  - powerpc/pci: Initialize msi_addr_mask for OF-created PCI devices (Myron Stowe) [RHEL-151449]
  - ALSA: hda/intel: Make MSI address limit based on the device DMA limit (Myron Stowe) [RHEL-151449]
  - drm/radeon: Make MSI address limit based on the device DMA limit (Myron Stowe) [RHEL-151449]
  - PCI/MSI: Check the device specific address mask in msi_verify_entries() (Myron Stowe) [RHEL-151449]
  - PCI/MSI: Convert the boolean no_64bit_msi flag to a DMA address mask (Myron Stowe) [RHEL-151449]
  - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: pci-epf-test: Select configfs (Myron Stowe) [RHEL-151449]
  - PCI: Account fully optional bridge windows correctly (Myron Stowe) [RHEL-151449]
  - PCI: Remove useless WARN_ON() from devres (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Add missing struct p2pdma_provider documentation (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: Fix typos in msi-howto.rst (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Add missing NULL check for alloc_workqueue() (Myron Stowe) [RHEL-151449]
  - PCI: Add WQ_PERCPU to alloc_workqueue() users (Myron Stowe) [RHEL-151449]
  - PCI: Disable ACS SV for IDT 0x8090 switch (Myron Stowe) [RHEL-151449]
  - PCI: Disable ACS SV for IDT 0x80b5 switch (Myron Stowe) [RHEL-151449]
  - PCI: Cache ACS Capabilities register (Myron Stowe) [RHEL-151449]
  - PCI: Enable ACS after configuring IOMMU for OF platforms (Myron Stowe) [RHEL-151449]
  - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] (Myron Stowe) [RHEL-151449]
  - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (Myron Stowe) [RHEL-151449]
  - PCI: Use device_lock_assert() to verify device lock is held (Myron Stowe) [RHEL-151449]
  - PCI: Use lockdep_assert_held(pci_bus_sem) to verify lock is held (Myron Stowe) [RHEL-151449]
  - PCI: Fix pci_slot_lock () device locking (Myron Stowe) [RHEL-151449]
  - PCI: Fix pci_slot_trylock() error handling (Myron Stowe) [RHEL-151449]
  - PCI: Mark Nvidia GB10 to avoid bus reset (Myron Stowe) [RHEL-151449]
  - PCI: Mark ASM1164 SATA controller to avoid bus reset (Myron Stowe) [RHEL-151449]
  - Documentation: tracing: Add PCI tracepoint documentation (Myron Stowe) [RHEL-151449]
  - PCI: Move CardBus bridge scanning to setup-cardbus.c (Myron Stowe) [RHEL-151449]
  - PCI: Add pbus_validate_busn() for Bus Number validation (Myron Stowe) [RHEL-151449]
  - PCI: Add dword #defines for Bus Number + Secondary Latency Timer (Myron Stowe) [RHEL-151449]
  - PCI: Use scnprintf() instead of sprintf() (Myron Stowe) [RHEL-151449]
  - PCI: Handle CardBus-specific params in setup-cardbus.c (Myron Stowe) [RHEL-151449]
  - PCI: Separate CardBus setup & build it only with CONFIG_CARDBUS (Myron Stowe) [RHEL-151449]
  - PCI: Add 'pci' prefix to struct pci_dev_resource handling functions (Myron Stowe) [RHEL-151449]
  - PCI: Use resource_assigned() in setup-bus.c algorithm (Myron Stowe) [RHEL-151449]
  - resource: Mark res given to resource_assigned() as const (Myron Stowe) [RHEL-151449]
  - PCI: Add pbus_mem_size_optional() to handle optional sizes (Myron Stowe) [RHEL-151449]
  - PCI: Check invalid align earlier in pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - PCI: Log reset and restore of resources (Myron Stowe) [RHEL-151449]
  - PCI: Add pci_resource_is_bridge_win() (Myron Stowe) [RHEL-151449]
  - PCI: Fetch dev_res to local var in __assign_resources_sorted() (Myron Stowe) [RHEL-151449]
  - PCI: Use res_to_dev_res() in reassign_resources_sorted() (Myron Stowe) [RHEL-151449]
  - PCI: Pass bridge window resource to pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - PCI: Push realloc check into pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - resource: Increase MAX_IORES_LEVEL to 8 (Myron Stowe) [RHEL-151449]
  - PCI: Use resource_set_range() that correctly sets ->end (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Create pwrctrl device if graph port is found (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add PCIe M.2 connector support (Myron Stowe) [RHEL-151449]
  - PCI: Drop the assert_perst() callback (Myron Stowe) [RHEL-151449]
  - PCI: qcom: Drop the assert_perst() callbacks (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Switch to pwrctrl create, power on/off, destroy APIs (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add APIs to power on/off pwrctrl devices (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add APIs to create, destroy pwrctrl devices (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add 'struct pci_pwrctrl::power_{on/off}' callbacks (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: pwrseq: Factor out power on/off code to helpers (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: slot: Factor out power on/off code to helpers (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: slot: Rename private struct and pointers for consistency (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: pwrseq: Rename private struct and pointers for consistency (Myron Stowe) [RHEL-151449]
  - PCI/PTM: Fix pcie_ptm_create_debugfs() memory leak (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Use bus-type functions (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Don't check for valid device and driver in bus callbacks (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Move pcie_port_bus_type to pcie source file (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Don't check for the driver's and device's bus (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Drop empty shutdown callback (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Fix potential resource leak (Myron Stowe) [RHEL-151449]
  - PCI/PM: Prevent runtime suspend until devices are fully initialized (Myron Stowe) [RHEL-151449]
  - PCI/PM: Avoid redundant delays on D3hot->D3cold (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Reset page reference count when page mapping fails (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails (Myron Stowe) [RHEL-151449]
  - PCI/PME: Replace RMW of Root Status register with direct write (Myron Stowe) [RHEL-151449]
  - PCI/ACPI: Restrict program_hpx_type2() to AER bits (Myron Stowe) [RHEL-151449]
  - PCI: Initialize RCB from pci_configure_device() (Myron Stowe) [RHEL-151449]
  - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() (Myron Stowe) [RHEL-151449]
  - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken (Myron Stowe) [RHEL-151449]
  - PCI: Do not attempt to set ExtTag for VFs (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Avoid creating sub-groups asynchronously (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors (Myron Stowe) [RHEL-151449]
  - PCI/bwctrl: Disable BW controller on Intel P45 using a quirk (Myron Stowe) [RHEL-151449]
  - PCI: trace: Add RAS tracepoint to monitor link speed changes (Myron Stowe) [RHEL-151449]
  - PCI: trace: Add generic RAS tracepoint for hotplug event (Myron Stowe) [RHEL-151449]
  - PCI/AER: Clear stale errors on reporting agents upon probe (Myron Stowe) [RHEL-151449]
  - resource: Introduce resource_assigned() for discerning active resources (Myron Stowe) [RHEL-151449]
  - PCI: Test for bit underflow in pcie_set_readrq() (Myron Stowe) [RHEL-151449]
  - docs: powerpc: add htm.rst to toctree (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Enable third attention indicator state (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Fix surprise plug detection and recovery (Myron Stowe) [RHEL-151449]
  - powerpc/eeh: Export eeh_unfreeze_pe() (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Work around switches with broken presence detection (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Clean up allocated IRQs on unplug (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variant of DEFINE_RES() (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variants of DEFINE_RES_*_NAMED() (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variant of DEFINE_RES_NAMED_DESC() (Myron Stowe) [RHEL-151449]
  - resource: split DEFINE_RES_NAMED_DESC() out of DEFINE_RES_NAMED() (Myron Stowe) [RHEL-151449]
  - xfs: fix remote xattr valuelblk check (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: fix the xattr scrub to detect freemap/entries array collisions (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: strengthen attr leaf block freemap checking (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: refactor attr3 leaf table size computation (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171476] {CVE-2026-31613}
  - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-167108] {CVE-2025-40237}
  - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-167108]
  - scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-153020]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-233.el10]
changelog:
  - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-130557]
  - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163346] {CVE-2025-38653}
  - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163346] {CVE-2025-38653}
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163346] {CVE-2025-38653}
  - rxrpc: Fix recvmsg() unconditional requeue (CKI Backport Bot) [RHEL-147235] {CVE-2026-23066}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-234.el10]
changelog:
  - s390/tape: Add support for bigger block sizes (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Introduce idal buffer array (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Move idal allocation to core functions (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Fix return value of ccw helper functions (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Remove extra CCW allocation for error recovery (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Remove 3590 Read Opposite error recovery (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Remove 34xx Read Opposite error recovery (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Remove count parameter from read/write_block functions (Ramesh Chhetri) [RHEL-136091]
  - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-178183]
  - scsi: smartpqi: Silence a recursive lock warning (Tomas Henzl) [RHEL-169577]
  - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-173193]
  - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-173193]
  - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-173188]
  - dpll: add pin operational state (Ivan Vecera) [RHEL-173188]
  - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172829]
  - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172829]
  - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172829]
  - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172829]
  - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172829] {CVE-2026-31709}
  - panic: introduce helper functions for panic state (Jocelyn Falempe) [RHEL-135265]
  - redhat/configs: add CONFIG_LOGO_LINUX_CLUT224_FILE (Jocelyn Falempe) [RHEL-135265]
  - redhat/configs: add CONFIG_HYPERV_VMBUS (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Fix build on MIPS64 (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Replace license boilerplate by SPDX header (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Fold au1100fb.h into its only user (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Replace custom printk wrappers by pr_* (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Make driver compilable on non-mips platforms (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Use proper conversion specifiers in printk formats (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Mark several local functions as static (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Don't store device specific data in global variables (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Remove struct fbcon_display.inverse (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: ffb: fix corrupted video output on Sun FFB1 (Jocelyn Falempe) [RHEL-135265]
  - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Check return value of clk_enable() in .resume() (Jocelyn Falempe) [RHEL-135265]
  - printk, vt, fbcon: Remove console_conditional_schedule() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: fix fb_pad_unaligned_buffer mask (Jocelyn Falempe) [RHEL-135265]
  - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent() (Jocelyn Falempe) [RHEL-135265]
  - video/logo: don't select LOGO_LINUX_MONO and LOGO_LINUX_VGA16 by default (Jocelyn Falempe) [RHEL-135265]
  - video/logo: move logo selection logic to Kconfig (Jocelyn Falempe) [RHEL-135265]
  - video/logo: remove logo_mac_clut224 (Jocelyn Falempe) [RHEL-135265]
  - newport_con: depend on LOGO_LINUX_CLUT224 instead of LOGO_SGI_CLUT224 (Jocelyn Falempe) [RHEL-135265]
  - video/logo: allow custom logo (Jocelyn Falempe) [RHEL-135265]
  - video/logo: add a type parameter to the logo makefile function (Jocelyn Falempe) [RHEL-135265]
  - video/logo: remove orphan .pgm Makefile rule (Jocelyn Falempe) [RHEL-135265]
  - fbdev: omapfb: remove duplicate check in omapfb_setup_mem() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: sh_mobile_lcdc: Make FB_DEVICE dependency optional (Jocelyn Falempe) [RHEL-135265]
  - fbdev: omapfb: Make FB_DEVICE dependency optional (Jocelyn Falempe) [RHEL-135265]
  - fbcon: check return value of con2fb_acquire_newinfo() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: hyperv_fb: Remove hyperv_fb driver (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Use device_create_with_groups() to fix sysfs groups registration race (Jocelyn Falempe) [RHEL-135265]
  - fbdev: smscufx: properly copy ioctl memory to kernelspace (Jocelyn Falempe) [RHEL-135265]
  - fbdev: rivafb: fix divide error in nv3_arb() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: i810: use appopriate log interface dev_info (Jocelyn Falempe) [RHEL-135265]
  - fbdev: tridentfb: replace printk() with dev_*() in probe (Jocelyn Falempe) [RHEL-135265]
  - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing (Jocelyn Falempe) [RHEL-135265]
  - fbdev: tcx.c fix mem_map to correct smem_start offset (Jocelyn Falempe) [RHEL-135265]
  - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (Jocelyn Falempe) [RHEL-135265]
  - fbdev: gxt4500fb: Use dev_err instead of printk (Jocelyn Falempe) [RHEL-135265]
  - fbdev: gbefb: fix to use physical address instead of dma address (Jocelyn Falempe) [RHEL-135265]
  - fbdev: vesafb: Use dev_* fn's instead printk (Jocelyn Falempe) [RHEL-135265]
  - fbdev: vga16fb: Request memory region (Jocelyn Falempe) [RHEL-135265]
  - fbdev: vga16fb: replace printk() with dev_*() in probe (Jocelyn Falempe) [RHEL-135265]
  - fbdev: atyfb: Check if pll_ops->init_pll failed (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-135265]
  - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS (Jocelyn Falempe) [RHEL-135265]
  - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Fix logic error in "offb" name match (Jocelyn Falempe) [RHEL-135265]
  - fbdev/hyperv_fb: deprecate this in favor of Hyper-V DRM driver (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Make drivers depend on LCD_CLASS_DEVICE (Jocelyn Falempe) [RHEL-135265]
  - fbdev: radeonfb: Remove stale product link in Kconfig (Jocelyn Falempe) [RHEL-135265]
  - Drivers: hv: Add CONFIG_HYPERV_VMBUS option (Jocelyn Falempe) [RHEL-135265]
  - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: s3fb: Revert mclk stop in suspend (Jocelyn Falempe) [RHEL-135265]
  - fbdev: mb862xxfb: Use int type to store negative error codes (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Use string choices helpers (Jocelyn Falempe) [RHEL-135265]
  - fbdev: core: Fix ubsan warning in pixel_to_pat (Jocelyn Falempe) [RHEL-135265]
  - fbdev: s3fb: Implement 1 and 2 BPP modes, improve 4 BPP (Jocelyn Falempe) [RHEL-135265]
  - fbdev: s3fb: Implement powersave for S3 FB (Jocelyn Falempe) [RHEL-135265]
  - fbdev: xenfb: Use vmalloc_array to simplify code (Jocelyn Falempe) [RHEL-135265]
  - fbdev/simplefb: Sort headers correctly (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Turn FB_MODE_HELPERS into an internal config option (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Make drivers depend on FB_TILEBLITTING (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Streamline setting rotated/unrotated bitops (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Move fbcon callbacks into struct fbcon_bitops (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Set rotate_font callback with related callbacks (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Rename struct fbcon_ops to struct fbcon_par (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Fix empty lines in fbcon.h (Jocelyn Falempe) [RHEL-135265]
  - fbdev: use panic_in_progress() helper (Jocelyn Falempe) [RHEL-135265]
  - drm/vesadrm: Support DRM_FORMAT_C8 (Jocelyn Falempe) [RHEL-135265]
  - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172557] {CVE-2026-43006}
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156428]
  - software node: Also support referencing non-constant software nodes (Mark Langsdorf) [RHEL-156428]
  - platform/x86: intel: chtwc_int33fe: don't dereference swnode args (Mark Langsdorf) [RHEL-156428]
  - usb: hcd: queue wakeup_work to system_freezable_wq workqueue (Mark Langsdorf) [RHEL-156428]
  - device property: Allow secondary lookup in fwnode_get_next_child_node() (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: wakeirq: Update outdated documentation comments (Mark Langsdorf) [RHEL-156428]
  - driver core: remove device_change_owner() export (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races (Mark Langsdorf) [RHEL-156428]
  - PM: wakeup: Handle empty list in wakeup_sources_walk_start() (Mark Langsdorf) [RHEL-156428]
  - regcache: Demote defaults readback from HW to debug print (Mark Langsdorf) [RHEL-156428]
  - driver-core: move devres_for_each_res() to base.h (Mark Langsdorf) [RHEL-156428]
  - driver core: faux: stop using static struct device (Mark Langsdorf) [RHEL-156428]
  - driver core: make pinctrl_bind_pins() private (Mark Langsdorf) [RHEL-156428]
  - driver core: attribute_container: change return type to void (Mark Langsdorf) [RHEL-156428]
  - devtmpfs: Replace simple_strtoul with kstrtoint in mount_param (Mark Langsdorf) [RHEL-156428]
  - devtmpfs: make 'devtmpfs_context_ops' static (Mark Langsdorf) [RHEL-156428]
  - regmap: Enable REGMAP when REGMAP_SLIMBUS is enabled (Mark Langsdorf) [RHEL-156428]
  - regmap: Fix race condition in hwspinlock irqsave routine (Mark Langsdorf) [RHEL-156428]
  - driver core: make bus_find_device_by_acpi_dev() stub prototype aligned (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: Do not flag runtime PM workqueue as freezable (Mark Langsdorf) [RHEL-156428]
  - PM: WQ_UNBOUND added to pm_wq workqueue (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Stop checking pm_runtime_barrier() return code (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Make pm_runtime_barrier() return void (Mark Langsdorf) [RHEL-156428]
  - regmap: i3c: switch to use i3c_xfer from i3c_priv_xfer (Mark Langsdorf) [RHEL-156428]
  - driver core: Check drivers_autoprobe for all added devices (Mark Langsdorf) [RHEL-156428]
  - driver core: WQ_PERCPU added to alloc_workqueue users (Mark Langsdorf) [RHEL-156428]
  - driver core: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156428]
  - tick/nohz: avoid showing '(null)' if nohz_full= not set (Mark Langsdorf) [RHEL-156428]
  - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER (Mark Langsdorf) [RHEL-156428]
  - software node: allow referencing firmware nodes (Mark Langsdorf) [RHEL-156428]
  - software node: increase the reference of the swnode by its fwnode (Mark Langsdorf) [RHEL-156428]
  - software node: read the reference args via the fwnode API (Mark Langsdorf) [RHEL-156428]
  - devres: Move devm_alloc_percpu() and related to devres.h (Mark Langsdorf) [RHEL-156428]
  - devres: Remove unused devm_free_percpu() (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: core: Fix runtime PM enabling in device_resume_early() (Mark Langsdorf) [RHEL-156428]
  - PM: Introduce new PMSG_POWEROFF event (Mark Langsdorf) [RHEL-156428]
  - PM: wakeup: Update after recent wakeup source removal ordering change (Mark Langsdorf) [RHEL-156428]
  - PM: wakeup: Delete timer before removing wakeup source from list (Mark Langsdorf) [RHEL-156428]
  - regmap: i3c: Use ARRAY_SIZE() (Mark Langsdorf) [RHEL-156428]
  - regcache: flat: Remove unneeded check and error message for -ENOMEM (Mark Langsdorf) [RHEL-156428]
  - regcache: rbtree: Split ->populate() from ->init() (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: fix typos in runtime.c comments (Mark Langsdorf) [RHEL-156428]
  - regmap: warn users about uninitialized flat cache (Mark Langsdorf) [RHEL-156428]
  - regmap: add flat cache with sparse validity (Mark Langsdorf) [RHEL-156428]
  - platform: Add firmware-agnostic irq and affinity retrieval interface (Mark Langsdorf) [RHEL-156428]
  - of/irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156428]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156428]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: docs: Update pm_runtime_allow/forbid() documentation (Mark Langsdorf) [RHEL-156428]
  - arch_topology: move parse_acpi_topology() to common code (Mark Langsdorf) [RHEL-156428]
  - firmware_loader: Replace simple_strtol() with kstrtoint() (Mark Langsdorf) [RHEL-156428]
  - firmware_loader: Only call cancel when upload is active (Mark Langsdorf) [RHEL-156428]
  - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (Mark Langsdorf) [RHEL-156428]
  - PM: dpm_watchdog: add module param to backtrace all CPUs (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: Introduce CALL_PM_OP() macro to simplify code (Mark Langsdorf) [RHEL-156428]
  - devcoredump: Fix circular locking dependency with devcd->mutex. (Mark Langsdorf) [RHEL-156428]
  - driver core: fw_devlink: Don't warn about sync_state() pending (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: Replace snprintf() with scnprintf() in show_trace_dev_match() (Mark Langsdorf) [RHEL-156428]
  - drivers/base/memory: add node id parameter to add_memory_block() (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Fix error checking for kunit_device_register() (Mark Langsdorf) [RHEL-156428]
  - drivers/base/node: fix double free in register_one_node() (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: Do not wait on SYNC_STATE_ONLY device links (Mark Langsdorf) [RHEL-156428]
  - redhat/configs: enable power runtime unit tests (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Add basic kunit tests for API contracts (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Make put{,_sync}() return 1 when already suspended (Mark Langsdorf) [RHEL-156428]
  - drivers/base/node: handle error properly in register_one_node() (Mark Langsdorf) [RHEL-156428]
  - devres: provide devm_kmemdup_const() (Mark Langsdorf) [RHEL-156428]
  - driver core: auxiliary bus: Optimize logic of auxiliary_match_id() (Mark Langsdorf) [RHEL-156428]
  - driver core: auxiliary bus: Drop dev_pm_domain_detach() call (Mark Langsdorf) [RHEL-156428]
  - driver core: Fix order of the kernel-doc parameters (Mark Langsdorf) [RHEL-156428]
  - driver core: get_dev_from_fwnode(): document potential race (Mark Langsdorf) [RHEL-156428]
  - drivers: base: fix "publically"->"publicly" (Mark Langsdorf) [RHEL-156428]
  - PM: core: Add two macros for walking device links (Mark Langsdorf) [RHEL-156428]
  - PM: core: Annotate loops walking device links as _srcu (Mark Langsdorf) [RHEL-156428]
  - driver core/PM: Set power.no_callbacks along with power.no_pm (Mark Langsdorf) [RHEL-156428]
  - driver core: faux: Set power.no_pm for faux devices (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path (Mark Langsdorf) [RHEL-156428]
  - regmap: use int type to store negative error codes (Mark Langsdorf) [RHEL-156428]
  - software node: Constify node_group in registration functions (Mark Langsdorf) [RHEL-156428]
  - regmap: Remove superfluous check for !config in __regmap_init() (Mark Langsdorf) [RHEL-156428]
  - regmap: mmio: Add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-156428]
  - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() (Waiman Long) [RHEL-154147]
  - panic: only warn about deprecated panic_print on write access (Waiman Long) [RHEL-154147]
  - docs: panic: correct some sys_ifo names in sysctl doc (Waiman Long) [RHEL-154147]
  - panic: remove CONFIG_PANIC_ON_OOPS_VALUE (Waiman Long) [RHEL-154147]
  - panic: remove redundant panic-cpu backtrace (Waiman Long) [RHEL-154147]
  - watchdog: skip checks when panic is in progress (Waiman Long) [RHEL-154147]
  - panic: use panic_try_start() in vpanic() (Waiman Long) [RHEL-154147]
  - panic: use panic_try_start() in nmi_panic() (Waiman Long) [RHEL-154147]
  - panic: introduce helper functions for panic state (Waiman Long) [RHEL-154147]
  - panic: clean up message about deprecated 'panic_print' parameter (Waiman Long) [RHEL-154147]
  - panic: add note that 'panic_print' parameter is deprecated (Waiman Long) [RHEL-154147]
  - watchdog/softlockup: fix incorrect CPU utilization output during softlockup (Waiman Long) [RHEL-154147]
  - watchdog/softlockup: fix wrong output when watchdog_thresh < 3 (Waiman Long) [RHEL-154147]
  - panic: add note that panic_print sysctl interface is deprecated (Waiman Long) [RHEL-154147]
  - panic: add 'panic_sys_info=' setup option for kernel cmdline (Waiman Long) [RHEL-154147]
  - panic: add 'panic_sys_info' sysctl to take human readable string parameter (Waiman Long) [RHEL-154147]
  - panic: generalize panic_print's function to show sys info (Waiman Long) [RHEL-154147]
  - panic: clean up code for console replay (Waiman Long) [RHEL-154147]
  - watchdog: fix opencoded cpumask_next_wrap() in watchdog_next_cpu() (Waiman Long) [RHEL-154147]
  - sysctl: Move sysctl_panic_on_stackoverflow to kernel/panic.c (Waiman Long) [RHEL-154147]
  - sysctl: Move tainted ctl_table into kernel/panic.c (Waiman Long) [RHEL-154147]
  - watchdog/perf: Provide function for adjusting the event period (Waiman Long) [RHEL-154147]
  - kernel/watchdog: add /sys/kernel/{hard,soft}lockup_count (Waiman Long) [RHEL-154147]
  - watchdog: fix watchdog may detect false positive of softlockup (Waiman Long) [RHEL-154147]
  - panic: Move panic ctl tables into panic.c (Waiman Long) [RHEL-154147]
  - x86/nmi: Consolidate NMI panic variables (Waiman Long) [RHEL-154147]
  - x86/nmi: Simplify unknown NMI panic handling (Waiman Long) [RHEL-154147]
  - watchdog/perf: optimize bytes copied and remove manual NUL-termination (Waiman Long) [RHEL-154147]
  - x86: Move sysctls into arch/x86 (Waiman Long) [RHEL-154147]
  - watchdog/hardlockup/perf: Warn if watchdog_ev is leaked (Waiman Long) [RHEL-154147]
  - watchdog/hardlockup/perf: Fix perf_event memory leak (Waiman Long) [RHEL-154147]
  - treewide: const qualify ctl_tables where applicable (Waiman Long) [RHEL-154147]
  - watchdog: output this_cpu when printing hard LOCKUP (Waiman Long) [RHEL-154147]
  - lib/Makefile: make union-find compilation conditional on CONFIG_CPUSETS (Waiman Long) [RHEL-154147]
  - kernel/watchdog: always restore watchdog_softlockup(,hardlockup)_user_enabled after proc show (Waiman Long) [RHEL-154147]
  - entry: Split generic entry into generic exception and syscall entry (Steve Dunnagan) [RHEL-150903]
  - entry: Inline syscall_exit_to_user_mode() (Steve Dunnagan) [RHEL-150903]
  - tools/bootconfig: specify LDFLAGS as an argument to CC (Brian Masney) [RHEL-73522]
  - tools/bootconfig: allow overriding CFLAGS assignment (Brian Masney) [RHEL-73522]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-235.el10]
changelog:
  - redhat: Add DENYLIST.rhel to BPF selftests (Viktor Malik) [RHEL-76113]
  - xfs: flush delalloc blocks on ENOSPC in xfs_trans_alloc_icreate (Ravi Singh) [RHEL-116652]
  - host1x: Make remove callback return void (Karol Herbst) [RHEL-176018]
  - overflow: Add STACK_FLEX_ARRAY_SIZE() helper (Karol Herbst) [RHEL-176018]
  - stddef: Remove token-pasting in TRAILING_OVERLAP() (Karol Herbst) [RHEL-176018]
  - stddef: Introduce TRAILING_OVERLAP() helper macro (Karol Herbst) [RHEL-176018]
  - kernel: include linux/util_macros.h (Karol Herbst) [RHEL-176018]
  - util_macros.h: make the header more resilient (Karol Herbst) [RHEL-176018]
  - s390/qeth: Handle ambiguous OSA RCs in s390dbf (Ramesh Chhetri) [RHEL-136140]
  - s390/qeth: Move all OSA RCs to single enum (Ramesh Chhetri) [RHEL-136140]
  - s390/ctcm: Fix double-kfree (Ramesh Chhetri) [RHEL-136140]
  - s390/ctcm: Use info level for handshake UC_RCRESET (Ramesh Chhetri) [RHEL-136140]
  - s390/iucv: Convert sprintf/snprintf to scnprintf (Ramesh Chhetri) [RHEL-136140]
  - x86/fpu: Remove export of mxcsr_feature_mask (Krzysztof Pawlinski) [RHEL-115162]
  - x86/pkeys: Simplify PKRU update in signal frame (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu: Clarify the "xa" symbolic name used in the XSTATE* macros (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu: Use XSAVE{,OPT,C,S} and XRSTOR{,S} mnemonics in xstate.h (Krzysztof Pawlinski) [RHEL-115162]
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE (Krzysztof Pawlinski) [RHEL-115162]
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu: Log XSAVE disablement consistently (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/apx: Add APX test (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/avx: Add AVX tests (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/apx: Enable APX state support (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/apx: Disallow conflicting MPX presence (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/apx: Define APX state component (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Adjust xstate copying logic for user ABI (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Adjust XSAVE buffer size calculation (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Introduce xfeature order table and accessor macro (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Remove xstate offset check (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Simplify print_xstate_features() (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Fix spelling mistake "hader" -> "header" (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Clarify supported xstates (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Consolidate test invocations into a single entry (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Introduce signal ABI test (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Refactor ptrace ABI test (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Refactor context switching test (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Enumerate and name xstate components (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Refactor XSAVE helpers for general use (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86: Consolidate redundant signal helper functions (Krzysztof Pawlinski) [RHEL-115162]
  - iommu/amd: Mark AMD IOMMUfd as Tech Preview (Jerry Snitselaar) [RHEL-168270]
  - ipmi:ssif: Clean up kthread on errors (Tony Camuso) [RHEL-169911]
  - ipmi:ssif: Remove unnecessary indention (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: Fix KUnit test link failure when KUNIT=m (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: add unit test for state machine (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: change log level to dbg in irq callback (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: fix message desynchronization after truncated response (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: cancel response timer on remove (Tony Camuso) [RHEL-169911]
  - ipmi: Replace use of system_wq with system_percpu_wq (Tony Camuso) [RHEL-169911]
  - ipmi:si: Fix check for a misbehaving BMC (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Handle error returns from the SMI sender (Tony Camuso) [RHEL-169911]
  - ipmi:si: Don't block module unload if the BMC is messed up (Tony Camuso) [RHEL-169911]
  - ipmi:si: Use a long timeout when the BMC is misbehaving (Tony Camuso) [RHEL-169911]
  - ipmi:si: Handle waiting messages when BMC failure detected (Tony Camuso) [RHEL-169911]
  - ipmi:ls2k: Make ipmi_ls2k_platform_driver static (Tony Camuso) [RHEL-169911]
  - ipmi: ipmb: initialise event handler read bytes (Tony Camuso) [RHEL-169911]
  - ipmi: Consolidate the run to completion checking for xmit msgs lock (Tony Camuso) [RHEL-169911]
  - ipmi: Fix use-after-free and list corruption on sender error (Tony Camuso) [RHEL-169911]
  - ipmi: Switch to use %ptSp (Tony Camuso) [RHEL-169911]
  - ipmi: Skip channel scan if channels are already marked ready (Tony Camuso) [RHEL-169911]
  - ipmi: Fix __scan_channels() failing to rescan channels (Tony Camuso) [RHEL-169911]
  - ipmi: Fix the race between __scan_channels() and deliver_response() (Tony Camuso) [RHEL-169911]
  - ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-169911]
  - ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-169911]
  - ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-169911]
  - ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-169911]
  - ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-169911]
  - ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-169911]
  - ipmi:si: Merge some if statements (Tony Camuso) [RHEL-169911]
  - ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-169911]
  - ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-169911]
  - ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-169911]
  - ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-169911]
  - ipmi: Rework user message limit handling (Tony Camuso) [RHEL-169911]
  - Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-169911]
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-169911]
  - char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-169911]
  - ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-169911]
  - ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-169911]
  - ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-169911]
  - ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-169911]
  - ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-169911]
  - ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-169911]
  - ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-169911]
  - ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-169911]
  - mpls: add seqcount to protect the platform_label{,s} pair (Antoine Tenart) [RHEL-161561]
  - rtnetlink: fix leak of SRCU struct in rtnl_link_register (Antoine Tenart) [RHEL-161561]
  - selftests: rtnetlink: add neighbour update test (Antoine Tenart) [RHEL-161561]
  - neighbour: restore protocol != 0 check in pneigh update (Antoine Tenart) [RHEL-161561]
  - ALSA: update RHEL kconfigs for 7.0 upstream code (Jaroslav Kysela) [RHEL-168082]
  - ASoC: pxa2xx-ac97: fix error handling for reset GPIO descriptor (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: NVL-S: add platform name (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: NVL: add platform name (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix the warning 'rae_fw' from request_firmware() not released (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: do not use 'acquire' PM API (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/tas2781: Fix sound abnormal issue on some SPI device (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett 18i20 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Evaluate packsize caps at the right place (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Correct kernel doc for sdca_irq_cleanup() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: update DMI quirk and add ACP DMIC for Lenovo platforms (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Unregister IRQ handlers on module remove (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: mask Function_Status value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Fix overwritten var within for loop (Jaroslav Kysela) [RHEL-168082]
  - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: modify period size constraints for ACE4 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/intel: enforce stricter period-size alignment for Intel NVL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8325: Add software reset during probe (Jaroslav Kysela) [RHEL-168082]
  - Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone" (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: avs: Fix memory leak in avs_register_i2s_test_boards() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: fix iteration in is_endpoint_present() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: Fix endpoint index if endpoints are missing (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Fix errors in IRQ cleanup (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: ti,tas2552: Add sound-dai-cells (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: audioreach: explicitly enable speaker protection modules (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: ps: Fix missing leading zeros in subsystem_device SSID log (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for Acer Swift SFG14-73 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: boards: fix unmet dependency on PINCTRL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: ehl_rt5660: Use the correct rtd->dev device in hw_params (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Slim 7 14AKP10 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for HP Laptop 15-fc0xxx (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 16X OLED M7601RM (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ctxfi: Check the error for index mapping (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/intel: Add MSI X870E Tomahawk to denylist by DMI ID (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for Framework F111:000F (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx (Jaroslav Kysela) [RHEL-168082]
  - Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist" (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB17X USB Audio (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add HP Laptop 15-fd0xxx mute LED quirk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek - Fixed Speaker Mute LED for HP EliteBoard G1a platform (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload (Jaroslav Kysela) [RHEL-168082]
  - ASoC: adau1372: Fix clock leak on PLL lock failure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: fix finding wrong entity (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: remove the max count of initialization table (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: wcd934x: fix typo in dt parsing (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: stm32: Fix incorrect compatible string in stm32h7-sai match (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Fix the device initialization (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: add ASUS HN7306EA quirk for legacy SDW machine (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: topology: reject invalid vendor array size in token parser (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2781: Add null check for calibration data (Jaroslav Kysela) [RHEL-168082]
  - ALSA: asihpi: avoid write overflow check warning (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl: imx-card: initialize playback_only and capture_only (Jaroslav Kysela) [RHEL-168082]
  - ASoC: simple-card-utils: Check value of is_playback_only and is_capture_only (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: qcom: Fix the license marking (Jaroslav Kysela) [RHEL-168082]
  - ALSA:usb:qcom: add AUXILIARY_BUS to Kconfig dependencies (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: rockchip: Add compatible for RK3576 SPDIF (Jaroslav Kysela) [RHEL-168082]
  - ALSA: firewire-lib: fix uninitialized local variable (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: add PX13 SoundWire machine link for rt721+tas2783x2 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: add DMI override for ACP70 flag (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sma1307: fix double free of devm_kzalloc() memory (Jaroslav Kysela) [RHEL-168082] {CVE-2026-31475}
  - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for Lenovo Yoga 7 2-in-1 16AKP10 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp-mach-common: Add missing error check for clock acquisition (Jaroslav Kysela) [RHEL-168082]
  - ASoC: detect empty DMI strings (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH USB Audio (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces (Jaroslav Kysela) [RHEL-168082]
  - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-core: drop delayed_work_pending() check before flush (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tegra: Add support for Tegra238 soundcard (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for ASUS UM6702RC (Jaroslav Kysela) [RHEL-168082]
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: Fix fragmentation regression in firmware download (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start (Jaroslav Kysela) [RHEL-168082]
  - ALSA: us122l: drop redundant interface references (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: renesas,rz-ssi: Document RZ/G3L SoC (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Add allocation failure check for Entity name (Jaroslav Kysela) [RHEL-168082] {CVE-2026-23301}
  - ALSA: hda/senary: Ensure EAPD is enabled during init (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/senary: Use codec->core.afg for GPIO access (Jaroslav Kysela) [RHEL-168082]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: tegra: Add compatible for Tegra238 sound card (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/hdmi: Add Tegra238 HDA codec device ID (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: Suppress pointless warning about number of GPIO pulls (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCD SKU (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1321: fix DMIC ch2/3 mask issue (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: Only patch ASP registers if the DAI is part of a DAIlink (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: firewire: dice: Fix printf warning with W=1 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/tas2781: A workaround solution to lower-vol issue among lower calibrated-impedance micro-speaker on TAS2781 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for HP Pavilion 15-eh1xxx to enable mute LED (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/ca0132: Set HP/Speaker auto-detect default from headphone pin verb (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Fix comments for sdca_irq_request() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: us144mkii: Drop kernel-doc markers (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Drop superfluous kernel-doc markers (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb: qcom: Correct parameter comment for uaudio_transfer_buffer_setup() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: cs35l56: Remove unnecessary struct cs_dsp_client_ops (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jaroslav Kysela) [RHEL-168082] {CVE-2026-23318}
  - ALSA: hda/realtek: add quirk for Acer Nitro ANV15-51 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/intel: increase default bdl_pos_adj for Nvidia controllers (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Use inclusive terms (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Cap the packet size pre-calculations (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs42l43: Report insert for exotic peripherals (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Skip clock selector for Focusrite devices (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add QUIRK_FLAG_SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Improve Focusrite sample rate filtering (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for Samsung Galaxy Book Flex (NT950QCT-A38A) (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: fix model name typo for Samsung Galaxy Book Flex (NT950QCG-X716) (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Acer Aspire V3-572G (Jaroslav Kysela) [RHEL-168082]
  - ALSA: scarlett2: Fix DSP filter control array handling (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: amd_sdw: add machine driver quirk for Lenovo models (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Add ACP7.0 match entries for Realtek parts (Jaroslav Kysela) [RHEL-168082]
  - ALSA: echoaudio: Add SPDX ids to some files (Jaroslav Kysela) [RHEL-168082]
  - ALSA: isa: Add SPDX id lines to some files (Jaroslav Kysela) [RHEL-168082]
  - ALSA: core: Add SPDX license id to files (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: add explicit port prepare handling (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Fix playback and capture (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3405MA (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: sm8250: Add quinary MI2S support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Avoid potentially repeated XRUN error messages (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Update the number of packets properly at receiving (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: asahi-kasei,ak5558: Reference common DAI properties (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for GHW-123P (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt721-sdca: Fix issue of fail to detect OMTP jack type (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add DSD support for iBasso DC04U (Jaroslav Kysela) [RHEL-168082]
  - ALSA: mixer: oss: Add card disconnect checkpoints (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-control: Set correct error code in refresh_bytes_control (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: select CONFIG_SND_HDA_EXT_CORE from SND_SOC_SOF_HDA_COMMON (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ctxfi: Add quirk for SE-300PCIE variant (160b:0102) (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/generic: fix typos in comments (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_asrc_dma: allocate memory from dma device (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_asrc: Add support for i.MX952 platform (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_asrc_m2m: Add option to start ASRC before DMA device for M2M (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: fsl,imx-asrc: Add support for i.MX952 platform (Jaroslav Kysela) [RHEL-168082]
  - ALSA: oss: delete self assignment (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Convert to FIELD_PREP (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Fill IEC958 CS info per params (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Add support for format S32_LE (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Add support for set mclk rate (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Swap PCM and DAI component registration order (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Improve sample rate support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Use dev_err_probe (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Fully convert to device managed resources (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Move DT compatible table (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Use device_get_match_data() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: KUnit tests for parsing and using onchip GPIOs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56-shared: KUnit tests for onchip speaker ID gpios (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: Support for reading speaker ID from on-chip GPIOs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ti: davinci-mcasp: Add asynchronous mode support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ti: davinci-mcasp: Streamline pdir behavior across rx & tx streams (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ti: davinci-mcasp: Disambiguate mcasp_is_synchronous function (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: davinci-mcasp: Add properties for asynchronous mode (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Limit values user can write to Selected Mode (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Add regmap defaults for specification defined values (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Rearrange FDL file messages (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Still process most of the jack detect if control is missing (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Handle volatile controls correctly (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Remove outdated todo comment (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2781: Put three different calibrated data solution into the same data structure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: fsl_rpmsg: Add compatible string for i.MX952 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: fsl_rpmsg: Add compatible string for i.MX94 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: Add a virtual CPU DAI (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: Fix NULL pointer dereference (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: sof-audio: Add support for loopback capture (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: sof-audio: Traverse paths with aggregated DAI widgets (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Add support for process modules with no input pins (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Add new tokens for pipeline direction (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: sof_sdw: Add a DAI link for loopback capture (Jaroslav Kysela) [RHEL-168082]
  - uapi: sound: sof: tokens: Add missing token for KCPS (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: pcm: Split up widget prepare and setup (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: sof-audio: Add a new op in struct sof_ipc_tplg_ops (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Minisforum V3 SE (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: add SDCA property check (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: allow module parameter override BT link to 0 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: soc-acpi-intel-ptl-match: drop rt721 related match tables (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda-sdw-bpt: support simultaneous audio and BPT streams (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: add hda_dma_prepare/cleanup helpers (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: add hda_dsp_stream_pair_get/put helpers (Jaroslav Kysela) [RHEL-168082]
  - ASoC: wcd-mbhc-v2: remove unnecessary module_init/exit functions (Jaroslav Kysela) [RHEL-168082]
  - docs: fix 're-use' -> 'reuse' in documentation (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Add ACP7.0 match entries for Cirrus Logic parts (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Sort Cirrus Logic match entries (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Rename Cirrus Logic component match entries to include link and uid (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Sort match table into most specific first (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Add error unwind in resume (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Use cached regmap on resume (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Check errors in set_dai_fmt() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Propagate errors in set_bias_level() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Fix DAC deemphasis control handling (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw87390: Add Anbernic RG-DS amp driver (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: aw87390: Add Anbernic RG-DS Amplifier (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_sai: add IMX_SCMI_MISC_DRV dependency (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: fix 64-bit division build failure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt5575: fix SPI dependency (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sdca: Fix missing regmap dependencies in Kconfig (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-core: add lockdep_assert_held() at snd_soc_unregister_dai() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tegra: set reg_default_cb callback (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tegra: Add AHUB writeable_reg for RX holes (Jaroslav Kysela) [RHEL-168082]
  - ASoC: wm8962: add .set_tdm_slot callback function (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: cv1800b: tidy Kconfig spacing (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: cv1800b: document DAC overwrite handling (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: add CV1800B internal DAC codec driver (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: add CV1800B internal ADC codec driver (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: sophgo,cv1800b: add ADC/DAC codec (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: add CV1800B I2S/TDM controller driver (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: sophgo,cv1800b: add I2S/TDM controller (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sun4i-spdif: Add missing check for devm_regmap_init_mmio (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ac97: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-168082]
  - ASoC: pxa2xx-ac97: Remove platform_data (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: Remove pxa2xx-ac97.c (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: Remove ak4641 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: add mixer support for Focusrite Forte (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: fix LG Gram Style 14 speakers (Jaroslav Kysela) [RHEL-168082]
  - ALSA: jack: Improve string handling in jack_kctl_name_gen (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/tas2781: Add tas2781_hda::catlog_id init (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: fsl,mqs: make gpr optional for SM-based SoCs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: wm8731: Remove unnecessary NULL check before clk_prepare_enable/clk_disable_unprepare (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rt1320-sdw: Refactor to reduce stack frames (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sdw_utils: Add quirk to ignore RT722 DMIC DAI (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: tidyup function naming (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: move struct snd_soc_dapm_context (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: add snd_soc_dapm_alloc() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: remove dev from snd_soc_dapm_context() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: remove compatibility definition for dapm (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-component: remove compatibility definition for component (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-component: remove snd_soc_component_xxx() wrapper (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: don't use snd_soc_component_get_bias_level() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Fix Kconfig dependencies for SND_SOC_ACPI_AMD_SDCA_QUIRKS (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rt56*: Remove IRQF_ONESHOT (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: Convert ti,tas2552 to DT schema (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/tas2781: Drop the unused macro definition (Jaroslav Kysela) [RHEL-168082]
  - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: controllers: intel: add support for Nova Lake (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: core: intel-dsp-config: Add support for NVL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: add support for Nova Lake NVL (Jaroslav Kysela) [RHEL-168082]
  - PCI: Add Intel Nova Lake audio Device ID (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: Remove MODULE_SOFTDEP for snd-hda-codec-hdmi (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: fw loading for devices without pci bus (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Drop the & operator in front of function name (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Drop goto label (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Drop unnecessary if condition (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Simplify the logic in rz_ssi_stream_is_play() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: realtek: fix misspelling of "minimum" in comments (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8323: Enable proper DAPM widgets for chip power (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8323: Enable proper DAPM widgets for capture ADC (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8323: remove DAC enablement write from es8323_set_bias_level (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8323: Replace magic numbers with defined macros (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/cirrus_scodec_test: Use faux_device instead of platform_device (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: mt8192-afe-pcm: Fix clocks and clock-names (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Propagate error codes from regmap updates (Jaroslav Kysela) [RHEL-168082]
  - dt-bindings: sound: google,goldfish-audio: Convert to DT schema (Jaroslav Kysela) [RHEL-168082]
  - ASoC: intel: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw88261: use dvdd-supply regulator (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: document dvdd-supply property for awinic,aw88261 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: add channel sum control (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: add kcontrol for num biquads (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: add avdd and iovdd supply (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: clarify areg-supply documentation (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: add avdd and iovdd supply (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: power on/off the device on demand (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: clean up presonus s1810 consts (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: presonus s18xx uses little-endian (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/cs8409: Add quirk for CDB35L56-FOUR-HD (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: soc-acpi: add is_device_rt712_vb() helper (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: drop unused Kconfig symbols (Jaroslav Kysela) [RHEL-168082]
  - ASoC: pxa: drop unused Kconfig symbol (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rtq9128: Add compatible changes for rtq9154 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: rtq9128: Add rtq9154 backward compatible (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rtq9128: Modify the chip initial setting (Jaroslav Kysela) [RHEL-168082]
  - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug (Jaroslav Kysela) [RHEL-168082]
  - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sof ipc4: Add sof_ipc4_widget_setup_msg_payload() and call it (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4: sof_ipc4_module_init_ext_init structs and macros (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sof: ipc4-topology: Add topology tokens domain_in stack & heap_bytes (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sof: Add domain_id, heap_bytes and stack_bytes to snd_sof_widget (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc/ops: Use guard() for spinlocks (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: Use guard() for spinlocks where it makes sense (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: mediatek: mtk-adsp-common: Use guard() for spinlock_irqsave (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: imx: imx-common: Use guard() for spinlock_irqsafe() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: amd: acp-ipc: Use guard() for spinlock_irq() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Use guard()/scoped_guard() for mutex locks where it makes sense (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: Use guard()/scoped_guard() for mutex locks where it makes sense (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rt1320-sdw: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: Convert realtek,rt5651 to DT schema (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw88261: Add devicetree support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw88261: Remove AW88261_I2C_NAME macro (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: da7213: Move comma operator at the end of the line (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8375: remove unnecessary format check (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda - fix function names & missing function parameter (Jaroslav Kysela) [RHEL-168082]
  - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Replace use of system_wq with system_dfl_wq (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Sort #include directives (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Drop unneeded braces in nau8821_hw_params() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Simplify conditional in nau8821_get_osr() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Drop superfluous return statement (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Cancel delayed work on component remove (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Cancel pending work before suspend (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Fixup nau8821_enable_jack_detect() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Remove duplicate DAPM routes (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt5575: Add the codec driver for the ALC5575 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: realtek,rt5575: add support for ALC5575 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8389: Update clock configuration (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8389: Add members about the version (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8389: Adjust wakeup configuration (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8389: Add members related to power supply (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: ES8389: Add property about power supply (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test_bin: Add tests for offsets > 0xffff (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test_bin: Run test cases on long-offset blocks (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test: Increase size of XM and YM on Halo Core (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test_bin: Make patch function a test parameter (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test_bin: Run test cases with v3 file format (Jaroslav Kysela) [RHEL-168082]
  - ALSA: echoaudio: adjust function name (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ice1724: adjust function name reference (Jaroslav Kysela) [RHEL-168082]
  - ALSA: mixart: adjust field name reference (Jaroslav Kysela) [RHEL-168082]
  - soundwire: intel_ace2x: add SND_HDA_CORE dependency (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix the remainder calculation of r0 value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: alc5623: tidyup clock inversion in alc5623_set_dai_fmt() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix size_t format string (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix 32-bit link failure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: Discard pm_runtime_put() return value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: avs: replace strcmp with sysfs_streq (Jaroslav Kysela) [RHEL-168082]
  - soundwire: Use bus methods for .probe(), .remove() and .shutdown() (Jaroslav Kysela) [RHEL-168082]
  - soundwire: Make remove function return no value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix the warning the string may be truncated (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: Fix retry checking in rt1320_rae_load() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: Change return type of rt1320_t0_load() to void (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: audioreach: Constify function arguments (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: topology: Constify pointed snd_soc_tplg_dapm_widget (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: topology: Constify pointed DAPM widget structs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: topology: Constify pointed ar control structs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: topology: Constify pointed topology and vendor structs (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/cm9825: Add GENE_TWL7 support for AAEON (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: Constify APR/GPR result structs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: Constify GPR callback response data (Jaroslav Kysela) [RHEL-168082]
  - soc: qcom: apr: Use typedef for GPR callback member (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: Constify APR callback response data (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: wcd939x-sdw: use devres for regmap allocation (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: rt286: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: read slave properties from acpi table (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: use acpi initialisation table (Jaroslav Kysela) [RHEL-168082]
  - ASoc: tas2783A: fw name based on system details (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: fix error log for calibration data (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: update default init writes (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: use custom firmware (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-control: Add support for generic bytes control (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4: Add definition for generic bytes control (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Set initial param_id for bytes control type (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: tas2780: tidyup format check in tas2780_set_fmt() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: audioreach: Add support for VI Sense module (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: audioreach: Add support for Speaker Protection module (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: support RAE parameters loading (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: support calibration and temperature/r0 loading (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: rt298: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: ti-common: support tas2563 amplifier (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: sof_rt5682: add tas2563 speaker amp support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8326: Add kcontrol for DRE (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8326: Add a kcontrol for PGAGAIN (Jaroslav Kysela) [RHEL-168082]
  - ALSA: oss: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: oss: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: timer: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: vmaster: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usx2y: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: compress_offload: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: control: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: pcm: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - soundwire: qcom: Use guard to avoid mixing cleanup and goto (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Fix acronym for Intel Gemini Lake (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: pci-nvl: Set on_demand_dsp_boot for NVL-S (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: pci-ptl: Set on_demand_dsp_boot for PTL and WCL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: pci-lnl: Set on_demand_dsp_boot for LNL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda-sdw-bpt: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: sof-client: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: control: skip rpm calls in ext_volatile_get if not implemented (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-loader: Remove redundant rpm resume_and_get from load_library (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sdw-mockup: Drop dummy remove function (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: wm0010: Replace cpu_to_be64 + le64_to_cpu with swab64 (Jaroslav Kysela) [RHEL-168082]
  - ASoc: qcom: q6afe: use guards consistently (Jaroslav Kysela) [RHEL-168082]
  - ASoC: davinci-mcasp: remove unneeded #ifdef (Jaroslav Kysela) [RHEL-168082]
  - ASoC: mediatek: mt8195: optimize property formatting error handling by using scnprintf() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: mediatek: mt8189-nau8825: don't use card->dapm directly (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: rt274: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl: fsl_ssi: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Specify image names in the device descriptor (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Drop superfluous space in PCM code (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Simplify catpt_stream_read_position() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Update CATPT_IPC_ERROR macro (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Move IPC error messages one level down (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp-sdw-sof: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp-sdw-legacy: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: Minor readability improve with new lines (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Add support for 32 bits sample width (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Add support for 24 bits sample width (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Move DMA configuration (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Use dev variable in probe() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Remove trailing comma in the terminator entry (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: Refuse to probe seq drivers with non-bus probe or remove (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: Use bus specific probe and remove (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: midi: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: ump: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: opl3: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: opl4: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: sb: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: emu10k1: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: oss: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ASoC: asoc.h: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: audio_topology: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: audio_helper: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: audio_codec: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: arizona-micsupp: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: arizona-haptics: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-236.el10]
changelog:
  - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178929] {CVE-2026-46243}
  - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
  - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-180187]
  - mei: me: add nova lake point S DID (Steve Best) [RHEL-117353]
  - platform/x86/intel/uncore-freq: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-133081]
  - platform/x86/intel/uncore-freq: Replace sprintf() with scnprintf() (Steve Best) [RHEL-133081]
  - platform/x86: intel-uncore-freq: fix all header kernel-doc warnings (Steve Best) [RHEL-133081]
  - platform/x86/intel-uncore-freq: Present unique domain ID per package (Steve Best) [RHEL-133081]
  - platform/x86/intel-uncore-freq: Fix warning in partitioned system (Steve Best) [RHEL-133081]
  - pinctrl: intel: platform: Add Nova Lake to the list of supported (Steve Best) [RHEL-129783]
  - scsi: qla2xxx: Add support to report MPI FW state (Nilesh Javali) [RHEL-157286]
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-81413] {CVE-2024-58007}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-237.el10]
changelog:
  - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180193]
  - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180193]
  - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180193]
  - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180193]
  - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180193]
  - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180193]
  - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180193]
  - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-163186]
  - dm-raid: only requeue bios when dm is suspending (Nigel Croxon) [RHEL-129337]
  - md: merge mddev serialize_policy into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md: merge mddev faillast_dev into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md: merge mddev has_superblock into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md/raid1: serialize overlap io for writemostly disk (Nigel Croxon) [RHEL-129337]
  - md/raid1: fix the comparing region of interval tree (Nigel Croxon) [RHEL-129337]
  - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-129337] {CVE-2026-43163}
  - md/raid5: Fix UAF on IO across the reshape position (Nigel Croxon) [RHEL-129337]
  - md/dm-raid: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: raise barrier before state machine transition (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: skip reading rdevs that are not in_sync (Nigel Croxon) [RHEL-129337]
  - md: suppress spurious superblock update error message for dm-raid (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout (Nigel Croxon) [RHEL-129337]
  - md/raid5: fix IO hang with degraded array with llbitmap (Nigel Croxon) [RHEL-129337]
  - md: adding a CONFIG_MD_LLBITMAP file to build (Nigel Croxon) [RHEL-129337]
  - md: Fix forward incompatibility from configurable logical block size (Nigel Croxon) [RHEL-129337]
  - md: Fix logical_block_size configuration being overwritten (Nigel Croxon) [RHEL-129337]
  - md: suspend array while updating raid_disks via sysfs (Nigel Croxon) [RHEL-129337] {CVE-2025-71225}
  - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Nigel Croxon) [RHEL-129337] {CVE-2025-71135}
  - md: Fix static checker warning in analyze_sbs (Nigel Croxon) [RHEL-129337]
  - md: remove legacy 1s delay in md_notify_reboot (Nigel Croxon) [RHEL-129337]
  - md/raid5: fix IO hang when array is broken with IO inflight (Nigel Croxon) [RHEL-129337]
  - md: warn about updating super block failure (Nigel Croxon) [RHEL-129337]
  - md/raid0: fix NULL pointer dereference in create_strip_zones() for dm-raid (Nigel Croxon) [RHEL-129337]
  - md: allow configuring logical block size (Nigel Croxon) [RHEL-129337]
  - md: add check_new_feature module parameter (Nigel Croxon) [RHEL-129337]
  - md/raid0: Move queue limit setup before r0conf initialization (Nigel Croxon) [RHEL-129337]
  - md: init bioset in mddev_init (Nigel Croxon) [RHEL-129337] {CVE-2025-68368}
  - md: delete md_redundancy_group when array is becoming inactive (Nigel Croxon) [RHEL-129337]
  - md: prevent adding disks with larger logical_block_size to active arrays (Nigel Croxon) [RHEL-129337]
  - md/raid5: remove redundant __GFP_NOWARN (Nigel Croxon) [RHEL-129337]
  - md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-129337] {CVE-2025-68373}
  - md/md-llbitmap: Remove unneeded semicolon (Nigel Croxon) [RHEL-129337]
  - md/md-linear: Enable atomic writes (Nigel Croxon) [RHEL-129337]
  - Factor out code into md_should_do_recovery() (Nigel Croxon) [RHEL-129337]
  - md: fix rcu protection in md_wakeup_thread (Nigel Croxon) [RHEL-129337] {CVE-2025-68374}
  - md: delete mddev kobj before deleting gendisk kobj (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: Use DIV_ROUND_UP_SECTOR_T (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: introduce new lockless bitmap (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: make method bitmap_ops->daemon_work optional (Nigel Croxon) [RHEL-129337]
  - md: add a new recovery_flag MD_RECOVERY_LAZY_RECOVER (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new method blocks_synced() in bitmap_operations (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new method skip_sync_blocks() in bitmap_operations (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: delay registration of bitmap_ops until creating bitmap (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new sysfs api bitmap_type (Nigel Croxon) [RHEL-129337]
  - md: add a new mddev field 'bitmap_id' (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: support discard for bitmap ops (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: introduce CONFIG_MD_BITMAP (Nigel Croxon) [RHEL-129337]
  - redhat/configs: Add configs for RISC-V core updates (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Teardown riscv specific bits after kvm_exit (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Add common nested acceleration support (Jennifer Berringer) [RHEL-147291]
  - riscv: KVM: add basic support for host vs guest profiling (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Order the object files alphabetically (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strrchr() implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strchr() implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strnlen() implementation (Jennifer Berringer) [RHEL-147291]
  - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node (Jennifer Berringer) [RHEL-147291]
  - riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set (Jennifer Berringer) [RHEL-147291]
  - riscv: kgdb: fix several debug register assignment bugs (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: optimize strlen loop efficiency (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: selftests: Add Zalasr extensions to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zalasr extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: add Zilsd and Zclsd extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - riscv: KVM: allow Zilsd and Zclsd extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: validate input vector csr registers (Jennifer Berringer) [RHEL-147291]
  - riscv: csr: define vtype register elements (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: init vector context with proper vlenb (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: return ENODATA for inactive vector extension (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: define copy_user_page() as copy_page() (Jennifer Berringer) [RHEL-147291]
  - riscv: compat: fix COMPAT_UTS_MACHINE definition (Jennifer Berringer) [RHEL-147291]
  - errata/sifive: remove unreliable warn_miss_errata (Jennifer Berringer) [RHEL-147291]
  - riscv: fix minor typo in syscall.h comment (Jennifer Berringer) [RHEL-147291]
  - riscv: kvm: Fix vstimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: suspend: Fix stimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: clocksource: Fix stimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: trace: fix snapshot deadlock with sbi ecall (Jennifer Berringer) [RHEL-147291] {CVE-2026-23217}
  - riscv: remove irqflags.h inclusion in asm/bitops.h (Jennifer Berringer) [RHEL-147291]
  - riscv: cpu_ops_sbi: smp_processor_id() returns int, not unsigned int (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_image: Fix dead link to boot-image-header.rst (Jennifer Berringer) [RHEL-147291]
  - riscv: pgtable: Cleanup useless VA_USER_XXX definitions (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: Fix Zk bundled extension missing Zknh (Jennifer Berringer) [RHEL-147291]
  - riscv: Sanitize syscall table indexing under speculation (Jennifer Berringer) [RHEL-147291] {CVE-2025-71203}
  - riscv/atomic.h: use RISCV_FULL_BARRIER in _arch_atomic* function. (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zilsd and Zclsd ISA extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: add ISA extension parsing for Zilsd and Zclsd (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: use xchg() on non-atomic_long_t variables, not atomic_long_xchg() (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: ptep_get_and_clear(): avoid atomic ops when !CONFIG_SMP (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: pmdp_huge_get_and_clear(): avoid atomic ops when !CONFIG_SMP (Jennifer Berringer) [RHEL-147291]
  - selftests/riscv: Add Zicbop prefetch test (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Expose Zicbop extension and its block size (Jennifer Berringer) [RHEL-147291]
  - riscv: Introduce Zalasr instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Export Zalasr extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for Zalasr (Jennifer Berringer) [RHEL-147291]
  - riscv: add RISC-V Svrsw60t59b extension support (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: Optimize the allocation of vector regset (Jennifer Berringer) [RHEL-147291]
  - riscv: cmpxchg: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: bitops: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: hweight: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: checksum: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: pgtable: Use riscv_has_extension_unlikely (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add bfloat16 extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Zicbop extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow bfloat16 extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zicbop extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Provide UAPI for Zicbop block size (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Change zicbom/zicboz block size to depend on the host isa (Jennifer Berringer) [RHEL-147291]
  - riscv: Update MIPS vendor id to 0x127 (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix CONFIG_AS_HAS_INSN for new .insn usage (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove redundant judgment for the default build target (Jennifer Berringer) [RHEL-147291]
  - riscv: Build loader.bin exclusively for Canaan K210 (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Replace deprecated strcpy in kgdb_arch_handle_qxfer_pkt (Jennifer Berringer) [RHEL-147291]
  - riscv: asm: use .insn for making custom instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro (Jennifer Berringer) [RHEL-147291]
  - riscv: stacktrace: Disable KASAN checks for non-current tasks (Jennifer Berringer) [RHEL-147291] {CVE-2025-40358}
  - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id() (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: avoid uninitialized variable in has_thead_homogeneous_vlenb() (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Fix stale vDSO data for late-initialized keys at boot (Jennifer Berringer) [RHEL-147291]
  - riscv: add a forward declaration for cpuinfo_op (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Don't print details of CPUs disabled in DT (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove the PER_CPU_OFFSET_SHIFT macro (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Define MAX_POSSIBLE_PHYSMEM_BITS for zsmalloc (Jennifer Berringer) [RHEL-147291]
  - riscv: Register IPI IRQs with unique names (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Define pgprot_dmacoherent() for non-coherent devices (Jennifer Berringer) [RHEL-147291]
  - riscv: Respect dependencies of ARCH_HAS_ELF_CORE_EFLAGS (Jennifer Berringer) [RHEL-147291]
  - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Fix probe address validation (Jennifer Berringer) [RHEL-147291]
  - riscv: entry: fix typo in comment 'instruciton' -> 'instruction' (Jennifer Berringer) [RHEL-147291]
  - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors (Jennifer Berringer) [RHEL-147291]
  - riscv: kgdb: Ensure that BUFMAX > NUMREGBYTES (Jennifer Berringer) [RHEL-147291]
  - riscv: bpf: Fix uninitialized symbol 'retval_off' (Jennifer Berringer) [RHEL-147291]
  - riscv: errata: Fix the PAUSE Opcode for MIPS P8700 (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add MIPS vendor extension probing (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xmipsexectl instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xmipsexectl as a vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: add validation for zfa, zfh and zfhmin (Jennifer Berringer) [RHEL-147291]
  - riscv: Move vendor errata definitions to new header (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable ARCH_HAVE_NMI_SAFE_CMPXCHG (Jennifer Berringer) [RHEL-147291]
  - riscv: introduce asm/swab.h (Jennifer Berringer) [RHEL-147291]
  - riscv: mmap(): use unsigned offset type in riscv_sys_mmap (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_ITYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_UTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_RD_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_BTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_C2_RS1_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_JTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_BTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_RS1_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_JTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Move branch_funct3 to insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Move branch_rs2_idx to insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Move all duplicate insn parsing macros into asm/insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Strengthen duplicate and inconsistent definition of RV_X() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix typo EXRACT -> EXTRACT (Jennifer Berringer) [RHEL-147291]
  - riscv: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-uapi headers (Jennifer Berringer) [RHEL-147291]
  - riscv: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: Sign extend struct ops return values properly (Jennifer Berringer) [RHEL-147291] {CVE-2025-40079}
  - riscv: use an atomic xchg in pudp_huge_get_and_clear() (Jennifer Berringer) [RHEL-147291]
  - binfmt_elf: preserve original ELF e_flags for core dumps (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec: Initialize kexec_buf struct (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: use lw when reading int cpu in bpf_get_smp_processor_id (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: use lw when reading int cpu in BPF_MOV64_PERCPU_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: use lw when reading int cpu in asm_per_cpu (Jennifer Berringer) [RHEL-147291]
  - riscv: use lw when reading int cpu in new_vmalloc_check (Jennifer Berringer) [RHEL-147291]
  - riscv: optimize gcd() performance on RISC-V without Zbb extension (Jennifer Berringer) [RHEL-147291]
  - riscv: optimize gcd() code size when CONFIG_RISCV_ISA_ZBB is disabled (Jennifer Berringer) [RHEL-147291]
  - lib/math/gcd: use static key to select implementation at runtime (Jennifer Berringer) [RHEL-147291]
  - riscv: Helper to parse hart index (Jennifer Berringer) [RHEL-147291]
  - riscv: traps_misaligned: properly sign extend value in misaligned load handler (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable interrupt during exception handling (Jennifer Berringer) [RHEL-147291]
  - riscv: Stop considering R_RISCV_NONE as bad relocations (Jennifer Berringer) [RHEL-147291]
  - riscv: cpu_ops_sbi: Use static array for boot_data (Jennifer Berringer) [RHEL-147291] {CVE-2025-38407}
  - riscv: export boot_cpu_hartid (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix sparse warning in vendor_extensions/sifive.c (Jennifer Berringer) [RHEL-147291]
  - Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" (Jennifer Berringer) [RHEL-147291] {CVE-2025-38434}
  - riscv: fix runtime constant support for nommu kernels (Jennifer Berringer) [RHEL-147291] {CVE-2025-38433}
  - riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Add support for Svinval extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Improve Kconfig help for RISCV_ISA_V_PREEMPTIVE (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zabha extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Make regs_irqs_disabled() more clear (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Kconfig: Fix help text of CMDLINE_EXTEND (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for PUD THP (Jennifer Berringer) [RHEL-147291]
  - riscv: xchg: Prefetch the destination word for sc.w (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ARCH_HAS_PREFETCH[W] support with Zicbop (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for Zicbop (Jennifer Berringer) [RHEL-147291]
  - riscv: Introduce Zicbop instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_file: Support loading Image binary file (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_file: Split the loading of kernel and others (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: add a function to check misalign trap delegability (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: move emulated access uniformity check in a function (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: declare misaligned_access_speed under CONFIG_RISCV_MISALIGNED (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: use on_each_cpu() for scalar misaligned access probing (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: request misaligned exception from SBI (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add SBI FWFT extension calls (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add FWFT extension interface (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add new SBI error mappings (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: remove useless parenthesis (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add Firmware Feature (FWFT) SBI extensions definitions (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Use nacl_csr_xyz() for accessing H-extension CSRs (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Add defines for the SBI nested acceleration extension (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Save/restore HSTATUS in C source (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive vendor extension support and probe for xsfqmaccdod and xsfqmaccqoq (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvqmaccdod and xsfvqmaccqoq vendor extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvqmaccdod and xsfvqmaccqoq vendor extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL (Jennifer Berringer) [RHEL-147291] {CVE-2025-37966}
  - riscv: misaligned: use get_user() instead of __get_user() (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: enable IRQs while handling misaligned accesses (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: factorize trap handling (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: Add handling for ZCB instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: uprobes: Add missing fence.i after building the XOL buffer (Jennifer Berringer) [RHEL-147291] {CVE-2025-37822}
  - riscv: Replace function-like macro by static inline function (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (Jennifer Berringer) [RHEL-147291]
  - riscv: Provide all alternative macros all the time (Jennifer Berringer) [RHEL-147291]
  - riscv: Properly export reserved regions in /proc/iomem (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix unaligned access info messages (Jennifer Berringer) [RHEL-147291]
  - riscv: Avoid fortify warning in syscall_get_arguments() (Jennifer Berringer) [RHEL-147291]
  - riscv: Use kvmalloc_array on relocation_hashtable (Jennifer Berringer) [RHEL-147291]
  - riscv/purgatory: 4B align purgatory_start (Jennifer Berringer) [RHEL-147291]
  - riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte (Jennifer Berringer) [RHEL-147291]
  - riscv: print hartid on bringup (Jennifer Berringer) [RHEL-147291]
  - riscv: Add norvc after .option arch in runtime const (Jennifer Berringer) [RHEL-147291]
  - RISC-V: errata: Use medany for relocatable builds (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add f & d extension validation checks (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add vector crypto extension validation checks (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add vector extension validation checks (Jennifer Berringer) [RHEL-147291]
  - riscv: Add runtime constant support (Jennifer Berringer) [RHEL-147291]
  - riscv: Move nop definition to insn-def.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Add parameter for skipping access speed tests (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix set up of vector cpu hotplug callback (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix set up of cpu hotplug callbacks (Jennifer Berringer) [RHEL-147291]
  - riscv: Change check_unaligned_access_speed_all_cpus to void (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix check_unaligned_access_all_cpus (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix riscv_online_cpu_vec (Jennifer Berringer) [RHEL-147291]
  - riscv: Annotate unaligned access init functions (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Zaamo/Zalrsc extensions to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zaamo/Zalrsc extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zaamo and Zalrsc extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: add parsing for Zaamo and Zalrsc extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler (Jennifer Berringer) [RHEL-147291] {CVE-2025-22069}
  - riscv: fgraph: Select HAVE_FUNCTION_GRAPH_TRACER depends on HAVE_DYNAMIC_FTRACE_WITH_ARGS (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix missing __free_pages() in check_vector_unaligned_access() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix the __riscv_copy_vec_words_unaligned implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Don't use %pK through printk (Jennifer Berringer) [RHEL-147291]
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Jennifer Berringer) [RHEL-147291]
  - riscv: tracing: Fix __write_overflow_field in ftrace_partial_regs() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix a comment typo in set_mm_asid() (Jennifer Berringer) [RHEL-147291]
  - clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug (Jennifer Berringer) [RHEL-147291]
  - riscv: Add stimecmp save and restore (Jennifer Berringer) [RHEL-147291]
  - riscv: Simplify base extension checks and direct boolean return (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove unused TASK_TI_FLAGS (Jennifer Berringer) [RHEL-147291]
  - RISC-V: selftests: Add TEST_ZICBOM into CBO tests (Jennifer Berringer) [RHEL-147291]
  - RISC-V: hwprobe: Expose Zicbom extension and its block size (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Enable cbo.clean/flush in usermode (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export bfloat16 ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: add ISA extension parsing for bfloat16 ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement smp_cond_load8/16() with Zawrs (Jennifer Berringer) [RHEL-147291]
  - riscv: Call secondary mmu notifier when flushing the tlb (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zicntr and Zihpm extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: remove useless pc check in stacktrace handling (Jennifer Berringer) [RHEL-147291]
  - riscv: Support huge pfnmaps (Jennifer Berringer) [RHEL-147291]
  - RISC-V: separate Zbb optimisations requiring and not requiring toolchain support (Jennifer Berringer) [RHEL-147291]
  - RISC-V: clarify what some RISCV_ISA* config options do (Jennifer Berringer) [RHEL-147291]
  - riscv: fix test_and_{set,clear}_bit ordering documentation (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Svvptc/Zabha/Ziccrse exts to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Ziccrse extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zabha extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Svvptc extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: signal: fix signal_minsigstksz (Jennifer Berringer) [RHEL-147291]
  - riscv: signal: fix signal frame size (Jennifer Berringer) [RHEL-147291]
  - riscv/futex: sign extend compare value in atomic cmpxchg (Jennifer Berringer) [RHEL-147291]
  - riscv/atomic: Do proper sign extension also for unsigned in arch_cmpxchg (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: use bitmap_equal() instead of memcmp() (Jennifer Berringer) [RHEL-147291]
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties (Jennifer Berringer) [RHEL-147291]
  - riscv: export __cpuid_to_hartid_map (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: vendorid_list: Add Microchip Technology to the vendor list (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document thead vendor extensions and xtheadvector extension (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Fix context save/restore with xtheadvector (Jennifer Berringer) [RHEL-147291] {CVE-2025-38435}
  - riscv: Add ghostwrite vulnerability (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add thead vendor extension probing (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Support xtheadvector save/restore (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xtheadvector instruction definitions (Jennifer Berringer) [RHEL-147291]
  - riscv: csr: Add CSR encodings for CSR_VXRM/CSR_VXSAT (Jennifer Berringer) [RHEL-147291]
  - RISC-V: define the elements of the VCSR vector CSR (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Use vlenb from DT for thead (Jennifer Berringer) [RHEL-147291]
  - riscv: Add thead and xtheadvector as a vendor extension (Jennifer Berringer) [RHEL-147291]
  - RISC-V: hwprobe: Document unaligned vector perf key (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Mark riscv_v_init() as __init (Jennifer Berringer) [RHEL-147291]
  - riscv: Always inline bitops (Jennifer Berringer) [RHEL-147291]
  - riscv/futex: Optimize atomic cmpxchg (Jennifer Berringer) [RHEL-147291]
  - tools: selftests: riscv: Add test count for vstate_prctl (Jennifer Berringer) [RHEL-147291]
  - tools: selftests: riscv: Add pass message for v_initval_nolibc (Jennifer Berringer) [RHEL-147291]
  - riscv: use local label names instead of global ones in assembly (Jennifer Berringer) [RHEL-147291]
  - riscv: qspinlock: Fixup _Q_PENDING_LOOPS definition (Jennifer Berringer) [RHEL-147291]
  - riscv: stacktrace: fix backtracing through exceptions (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Fix the out of bound issue of vmemmap address (Jennifer Berringer) [RHEL-147291] {CVE-2024-57945}
  - riscv: kprobes: Fix incorrect address calculation (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix sleeping in invalid context in die() (Jennifer Berringer) [RHEL-147291] {CVE-2024-57939}
  - riscv: module: remove relocation_head rel_entry member allocation (Jennifer Berringer) [RHEL-147291]
  - riscv: selftests: Fix warnings pointer masking test (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Do not call pmd dtor on vmemmap page table teardown (Jennifer Berringer) [RHEL-147291] {CVE-2024-56673}
  - riscv: Fix IPIs usage in kfence_protect_page() (Jennifer Berringer) [RHEL-147291] {CVE-2024-53687}
  - riscv: Fixup boot failure when CONFIG_DEBUG_RT_MUTEXES=y (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Svade and Svadu Extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Add Svade and Svadu Extensions Support for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Add Svade and Svadu Extensions Support (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix default misaligned access trap (Jennifer Berringer) [RHEL-147291]
  - riscv: Add qspinlock support (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for Ziccrse (Jennifer Berringer) [RHEL-147291]
  - asm-generic: ticket-lock: Add separate ticket-lock.h (Jennifer Berringer) [RHEL-147291]
  - asm-generic: ticket-lock: Reuse arch_spinlock_t of qspinlock (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement xchg8/16() using Zabha (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement arch_cmpxchg128() using Zacas (Jennifer Berringer) [RHEL-147291]
  - riscv: Improve zacas fully-ordered cmpxchg() (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement cmpxchg8/16() using Zabha (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement cmpxchg32/64() using Zacas (Jennifer Berringer) [RHEL-147291]
  - riscv: Do not fail to build on byte/halfword operations with Zawrs (Jennifer Berringer) [RHEL-147291]
  - riscv: Move cpufeature.h macros into their own header (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Smnpm and Ssnpm to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Smnpm and Ssnpm extensions for guests (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Export the Supm ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: selftests: Add a pointer masking test (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for the tagged address ABI (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for userspace pointer masking (Jennifer Berringer) [RHEL-147291]
  - riscv: Add CSR definitions for pointer masking (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for pointer masking (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Report vector unaligned access speed hwprobe (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Detect unaligned vector accesses supported (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Replace RISCV_MISALIGNED with RISCV_SCALAR_MISALIGNED (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Scalar unaligned access emulated on hotplug CPUs (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Check scalar unaligned access on all CPUs (Jennifer Berringer) [RHEL-147291]
  - riscv: Call riscv_user_isa_enable() only on the boot hart (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for per-thread envcfg CSR values (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable cbo.zero only when all harts support Zicboz (Jennifer Berringer) [RHEL-147291]
  - perf vendor events arm64: Add Tegra410 Olympus PMU events (Mark Salter) [RHEL-110828]
  - configs: arm64: enable Tegra410 PMU (Mark Salter) [RHEL-110828]
  - perf: add NVIDIA Tegra410 C2C PMU (Mark Salter) [RHEL-110828]
  - perf: add NVIDIA Tegra410 CPU Memory Latency PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 PCIE-TGT PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 PCIE PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: Add arm_cspmu_acpi_dev_get (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 UCF PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Rename doc to Tegra241 (Mark Salter) [RHEL-110828]
  - i2c: tegra: Add support for Tegra410 (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add logic to support different register offsets (Mark Salter) [RHEL-143333]
  - i2c: tegra: Introduce tegra_i2c_variant to identify DVC and VI (Mark Salter) [RHEL-143333]
  - i2c: tegra: Don't mark devices with pins as IRQ safe (Mark Salter) [RHEL-143333]
  - i2c: tegra: remove unused rst (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add Tegra264 support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add support for SW mutex register (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add HS mode support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Update Tegra256 timing parameters (Mark Salter) [RHEL-143333]
  - i2c: tegra: Use separate variables for fast and fastplus (Mark Salter) [RHEL-143333]
  - i2c: tegra: Do not configure DMA if not supported (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add Tegra256 support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Remove dma_sync_*() calls (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add missing kernel-doc for dma_dev member (Mark Salter) [RHEL-143333]
  - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172974] {CVE-2026-31581}
  - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171687] {CVE-2026-31467}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-238.el10]
changelog:
  - redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
  - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (Mamatha Inamdar) [RHEL-174883]
  - powerpc/fadump: Reserve page-aligned boot_memory_size during fadump_reserve_mem (Mamatha Inamdar) [RHEL-174883]
  - powerpc/fadump: Refactor and prepare fadump_cma_init for late init (Mamatha Inamdar) [RHEL-174883]
  - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179440]
  - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180014] {CVE-2026-46173}
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170766] {CVE-2026-31532}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-239.el10]
changelog:
  - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183464]
  - io_uring: Fix KASAN UAF in io_kbuf_recycle_legacy (Jeff Moyer) [RHEL-183200]
  - crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182119]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182119]
  - driver core: generalize driver_override in struct device (Mircea Dragan) [RHEL-113464]
  - PCI: Initialize temporary device in new_id_store() (Mircea Dragan) [RHEL-113464]
  - s390/ap: use generic driver_override infrastructure (Mircea Dragan) [RHEL-113464]
  - s390/ap: Restrict driver_override versus apmask and aqmask use (Mircea Dragan) [RHEL-113464]
  - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Mircea Dragan) [RHEL-113464]
  - s390/ap: Support driver_override for AP queue devices (Mircea Dragan) [RHEL-113464]
  - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Mircea Dragan) [RHEL-113464]
  - redhat/configs: set NXP storage driver to built-in for boot speed (Ed Chong) [RHEL-181039]
  - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180316] {CVE-2026-43260}
  - objtool: Fix Clang jump table detection (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix mkstemp() failure with long paths (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix data alignment in __clone_symbol() (Yannick Cote) [RHEL-152189]
  - objtool: Fix another stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Handle Clang RSP musical chairs (Yannick Cote) [RHEL-152189]
  - objtool: Fix ERROR_INSN() error message (Yannick Cote) [RHEL-152189]
  - objtool: Fix data alignment in elf_add_data() (Yannick Cote) [RHEL-152189]
  - objtool: Use HOSTCFLAGS for HAVE_XXHASH test (Yannick Cote) [RHEL-152189]
  - objtool/klp: Avoid NULL pointer dereference when printing code symbol name (Yannick Cote) [RHEL-152189]
  - objtool/klp: Disable unsupported pr_debug() usage (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix detection of corrupt static branch/call entries (Yannick Cote) [RHEL-152189]
  - kbuild: Leave objtool binary around with 'make clean' (Yannick Cote) [RHEL-152189]
  - kbuild: Add objtool to top-level clean target (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix symbol correlation for orphaned local symbols (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix bug table handling for __WARN_printf() (Yannick Cote) [RHEL-152189]
  - objtool: Replace custom macros in elf.c with shared ones (Yannick Cote) [RHEL-152189]
  - objtool: Print bfd_vma as unsigned long long on ia32-x86_64 cross build (Yannick Cote) [RHEL-152189]
  - objtool: Fix libopcodes linking with static libraries (Yannick Cote) [RHEL-152189]
  - kbuild: prefer ${NM} in check-function-names.sh (Yannick Cote) [RHEL-152189]
  - objtool: fix build failure due to missing libopcodes check (Yannick Cote) [RHEL-152189]
  - objtool: fix compilation failure with the x32 toolchain (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Add more robust signal error handling, detect and warn about stack overflows (Yannick Cote) [RHEL-152189]
  - objtool: Fix stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Fix segfault on unknown alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Build with disassembly can fail when including bdf.h (Yannick Cote) [RHEL-152189]
  - objtool: Trim trailing NOPs in alternative (Yannick Cote) [RHEL-152189]
  - objtool: Add wide output for disassembly (Yannick Cote) [RHEL-152189]
  - objtool: Compact output for alternatives with one instruction (Yannick Cote) [RHEL-152189]
  - objtool: Improve naming of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Add Function to get the name of a CPU feature (Yannick Cote) [RHEL-152189]
  - objtool: Provide access to feature and flags of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Fix address references in alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble jump table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble exception table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print addresses with alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print headers for alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Preserve alternatives order (Yannick Cote) [RHEL-152189]
  - objtool: Add the --disas=<function-pattern> action (Yannick Cote) [RHEL-152189]
  - objtool: Do not validate IBT for .return_sites and .call_sites (Yannick Cote) [RHEL-152189]
  - objtool: Improve tracing of alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Add functions to better name alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Identify the different types of alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Improve register reporting during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Trace instruction state changes during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Add option to trace function validation (Yannick Cote) [RHEL-152189]
  - objtool: Record symbol name max length (Yannick Cote) [RHEL-152189]
  - objtool: Extract code to validate instruction from the validate branch loop (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble instruction on warning or backtrace (Yannick Cote) [RHEL-152189]
  - objtool: Store instruction disassembly result (Yannick Cote) [RHEL-152189]
  - objtool: Print symbol during disassembly (Yannick Cote) [RHEL-152189]
  - tool build: Remove annoying newline in build output (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble code with libopcodes instead of running objdump (Yannick Cote) [RHEL-152189]
  - objtool: Create disassembly context (Yannick Cote) [RHEL-152189]
  - objtool: Move disassembly functions to a separated file (Yannick Cote) [RHEL-152189]
  - objtool: Remove second pass of .cold function correlation (Yannick Cote) [RHEL-152189]
  - objtool: Skip non-canonical aliased symbols in add_jump_table_alts() (Yannick Cote) [RHEL-152189]
  - objtool: Return canonical symbol when aliases exist in symbol finding helpers (Yannick Cote) [RHEL-152189]
  - objtool: Don't alias undefined symbols (Yannick Cote) [RHEL-152189]
  - objtool: Fix .cold function detection for duplicate symbols (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/x86: Fix NOP decode (Yannick Cote) [RHEL-152189]
  - objtool/x86: Add UDB support (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark types based on break immediate code (Yannick Cote) [RHEL-152189]
  - livepatch/klp-build: Fix inconsistent kernel version (Yannick Cote) [RHEL-152193]
  - livepatch: Free klp_{object,func}_ext data after initialization (Yannick Cote) [RHEL-152193]
  - livepatch: Fix having __klp_objects relics in non-livepatch modules (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Require Clang assembler >= 20 (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Fix klp-build vs CONFIG_MODULE_SRCVERSION_ALL (Yannick Cote) [RHEL-152193]
  - selftests: livepatch: use canonical ftrace path (Yannick Cote) [RHEL-152193]
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Yannick Cote) [RHEL-152193]
  - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-168848]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-168848]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-168848]
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and list header in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: release local_lock before re-enabling softirqs (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-168848]
  - netfilter: bridge: eb_tables: close module init race (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: move to two-stage removal scheme (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xtables_unregister_table_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: unregister the templates first (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allocate hook ops while under mutex (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allow initial table replace without emitting audit log message (Florian Westphal) [RHEL-168848]
  - ipvs: do not leak dest after get from dest trash (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: ensure sufficient headroom in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: fix L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: skip L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_socket: skip socket lookup for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-168848]
  - netfilter: skip recording stale or retransmitted INIT (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-168848]
  - netfilter: reject zero shift in nft_bitwise (Florian Westphal) [RHEL-168848]
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-168848]
  - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-168848]
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-168848]
  - ipvs: fix MTU check for GSO packets in tunnel mode (Florian Westphal) [RHEL-168848]
  - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-168848]
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_tproxy.sh: adjust to socat changes (Florian Westphal) [RHEL-168848]
  - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove UDP-Lite conntrack support (Florian Westphal) [RHEL-168848]
  - netfilter: xt_socket: enable defrag after all other checks (Florian Westphal) [RHEL-168848]
  - netfilter: xt_HL: add pr_fmt and checkentry validation (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink: prefer skb_mac_header helpers (Florian Westphal) [RHEL-168848]
  - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-168848]
  - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-168848]
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-168848]
  - ipvs: fix NULL deref in ip_vs_add_service error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta: add double-tagged vlan and pppoe support (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add netlink policy based cap on registers (Florian Westphal) [RHEL-168848]
  - netfilter: add more netlink-based policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: remove unreliable debug code in decode_octstr (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix typo in enum description (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: revisit array resize logic (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-168848]
  - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-168848]
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use unsigned int for monthday bit shift (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-168848]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_flow_table_ip: reset mac header before vlan push (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix for duplicate device in netdev hooks (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: remove locking in nfqnl_get_sk_secctx (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: remove register tracking infrastructure (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: drop obsolete EXPORT_SYMBOLs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't disable bh when acquiring tree lock (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst after dest is removed (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst if dev is going down (Florian Westphal) [RHEL-168848]
  - ipvs: skip ipv6 extension headers for csum checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: revert commit_mutex usage in reset path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_quota: use atomic64_xchg for reset (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: serialize reset with spinlock (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: validate element belonging to interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: fix reset of counters on 32bit archs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add IPV6_TUNNEL to config (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: dedicated slab for flow entry (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: add udp fraglist gro test case (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't gc elements on insert (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use is_leap_year() helper (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct (Florian Westphal) [RHEL-168848]
  - netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto signature (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: remove seqcount_rwlock_t (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: use binary search array in get command (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: translate rbtree to array for binary search (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add .abort_skip_removal flag for set types (Florian Westphal) [RHEL-168848]
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix tracking of connections from localhost (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-168848]
  - netfilter: don't include xt and nftables.h in unrelated subsystems (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: enable icmp clash support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: increase the connection clean up limit to 64 (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reset table validation state on abort (Florian Westphal) [RHEL-168848]
  - netfilter: replace -EEXIST with -EBUSY (Florian Westphal) [RHEL-168848]
  - netfilter: nft_synproxy: avoid possible data-race on update operation (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix range overlap detection (Florian Westphal) [RHEL-168848]
  - audit: add audit_log_nf_skb helper function (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: prefer xfail in case race wasn't triggered (Florian Westphal) [RHEL-168848]
  - netfilter: always set route tuple out ifindex (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix leaked ct in error paths (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: improve UAPI kernel-doc comments (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_srh: fix UAPI kernel-doc comments format (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: add support to object update operation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: update the count if add was skipped (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: rework API to use sk_buff directly (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use tuple address to calculate next hop (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: remove hw_ifidx (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: consolidate xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: move path discovery infrastructure to its own file (Florian Westphal) [RHEL-168848]
  - netfilter: fix typo in nf_conntrack_l4proto.h comment (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: disable 0 value for conntrack_max setting (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: query conntrack state to check for port clash resolution (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_fib.sh: fix spurious test failures (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: fix udpclash tool hang (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: extend offset to 65535 bytes (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: remove unneeded exports (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: remove redundant test for avx feature bit (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: Use csum_replace4() instead of opencoding (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: Use vmalloc_array() to improve code (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: use avx2 algorithm for insertions too (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: remove refcounting in dying list dumping (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: Remove unused functions xt_{in|out}name() (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: tone-down conntrack clash test (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: conntrack_resize.sh: also use udpclash tool (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add conntrack clash resolution test case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Reintroduce shortened deletion notifications (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Drop dead code from fill_*_info routines (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove DCCP protocol support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup_netdev: Move the recursion counter struct netdev_xmit (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup{4, 6}: Move duplication check to task_struct (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: Remove redundant NFCT_ALIGN call (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cgroup: Make it independent from net_cls (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINE (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: Use strscpy() instead of strscpy_pad() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_hashlimit: replace vmalloc calls with kvmalloc (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: cleanup timeout definitions (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: add support for doing AND, OR and XOR directly (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: rename some boolean operation functions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: replace deprecated strncpy with strscpy_pad (Florian Westphal) [RHEL-168848]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175537] {CVE-2026-31474}
  - dmaengine: dw-edma: Add non-LL mode (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add AMD MDB Endpoint Support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_{pause,resume}() callbacks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_tx_status() callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Use rz_lmdesc_setup() to invalidate descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop unnecessary local_irq_save() call (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop goto instruction and label (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop read of CHCTRL register (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: add RZ/{T2H,N2H} support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make register_dma_req() chip-specific (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make error interrupt optional (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add virtual IRQ for interrupt-emulation doorbells (Eder Zulian) [RHEL-172442]
  - dmaengine: dw_edma: correct kernel-doc warnings in <linux/dma/edma.h> (Eder Zulian) [RHEL-172442]
  - New configs in drivers/dma (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add interrupt-emulation hooks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: fix MSI data programming for multi-IRQ case (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: adm: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835-dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: sh: rz-dmac: Make channel irq local (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: uapi: use UAPI types (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Discard pm_runtime_put() return value (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: Remove redundant pm_runtime_mark_last_busy() calls (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: enable compile testing (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use lock guards (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: order includes alphabetically (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix confusing cleanup.h syntax (Eder Zulian) [RHEL-172442]
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: clean up dra7x route allocation error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172442]
  - dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172442]
  - dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172442]
  - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-137412]
  - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-137412]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-137412]
  - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-137412]
  - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-137412]
  - ice: add dpll peer notification for paired SMA and U.FL pins (Michal Schmidt) [RHEL-137412]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-137412]
  - ice: fix missing dpll notifications for SW pins (Michal Schmidt) [RHEL-137412]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Michal Schmidt) [RHEL-137412]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Michal Schmidt) [RHEL-137412]
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Michal Schmidt) [RHEL-137412]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Michal Schmidt) [RHEL-137412]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Michal Schmidt) [RHEL-137412]
  - ice: fix ready bitmap check for non-E822 devices (Michal Schmidt) [RHEL-137412]
  - ice: perform PHY soft reset for E825C ports at initialization (Michal Schmidt) [RHEL-137412]
  - ice: fix timestamp interrupt configuration for E825C (Michal Schmidt) [RHEL-137412]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-137412]
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-137412]
  - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-137412]
  - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [ice] (Michal Schmidt) [RHEL-137412]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [ice] (Michal Schmidt) [RHEL-137412]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [ice] (Michal Schmidt) [RHEL-137412]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [ice] (Michal Schmidt) [RHEL-137412]
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-137412]
  - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-137412]
  - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-137412]
  - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Michal Schmidt) [RHEL-137412]
  - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-137412]
  - ice: fix PTP timestamping broken by SyncE code on E825C (Michal Schmidt) [RHEL-137412]
  - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-137412]
  - ice: use ice_update_eth_stats() for representor stats (Michal Schmidt) [RHEL-137412]
  - ice: fix inverted ready check for VF representors (Michal Schmidt) [RHEL-137412]
  - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-137412]
  - ice: fix rxq info registering in mbuf packets (Michal Schmidt) [RHEL-137412]
  - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-137412]
  - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-137412]
  - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-137412]
  - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-137412]
  - ice: fix missing TX timestamps interrupts on E825 devices (Michal Schmidt) [RHEL-137412]
  - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-137412]
  - ice: reshuffle and group Rx and Tx queue fields by cachelines (Michal Schmidt) [RHEL-137412]
  - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-137412]
  - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-137412]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-137412]
  - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-137412]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-137412]
  - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-137412]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171746]
  - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171457] {CVE-2026-31636}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171437] {CVE-2026-31607}
  - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171420] {CVE-2026-31641}
  - vxlan: validate ND option lengths in vxlan_na_create (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-152728]
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Guillaume Nault) [RHEL-152728]
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_tunnel: spread netdev_lockdep_set_classes() (Guillaume Nault) [RHEL-152728]
  - arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152728]
  - erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152728]
  - ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152728]
  - selftest: packetdrill: add tcp_timestamping_tcp_tx_timestamp_bug.pkt (Paolo Abeni) [RHEL-152718]
  - tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152718]
  - net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152718]
  - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-152718]
  - tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152718]
  - tcp: fix tcp_tso_should_defer() vs large RTT (Paolo Abeni) [RHEL-152718]
  - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() (Paolo Abeni) [RHEL-152718]
  - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Paolo Abeni) [RHEL-152718]
  - wireguard: send: append trailer after expanding head (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit (Toke Høiland-Jørgensen) [RHEL-152735] {CVE-2026-31579}
  - wireguard: allowedips: remove redundant space (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: allowedips: Use kfree_rcu() instead of call_rcu() (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: netlink: generate netlink code (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: generate header with ynl-gen (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move flag enums (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move enum wg_cmd (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: add YNL specification (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: lower .maxattr for WG_CMD_GET_DEVICE (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: convert to split ops (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: use WG_KEY_LEN in policies (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: validate nested arrays in policy (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: enable strict genetlink validation (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: always return valid online CPU in wg_cpumask_choose_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: simplify wg_cpumask_next_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: peer: Replace sockaddr with sockaddr_inet (CKI Backport Bot) [RHEL-152735]
  - ipv6: Add sockaddr_inet unified address structure (CKI Backport Bot) [RHEL-152735]
  - clocksource/drivers/arm_arch_timer_mmio: Prevent driver unbind (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Get rid of acpi_arch_timer_mem_init() (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer_mmio: Switch over to standalone driver (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer: Add standalone MMIO driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: tools: pfrut: fix memory leak and resource leak in pfrut.c (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Move Lenovo Legion S7 15ACH6 quirk to the right section (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Add dependency between iommu and devices (Mark Langsdorf) [RHEL-156420]
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156420]
  - drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156420]
  - ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156420]
  - x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl2.h: ACPI 6.6: RAS2: Update Parameter Block structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156420]
  - APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rearrange declarations in header file (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156420]
  - ACPI: acpi_watchdog: use LIST_HEAD for stack-allocated list (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156420]
  - ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156420]
  - wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156420]
  - acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: make hwerr_data visible for debugging (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: track and log recoverable hardware errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156420]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Fix unused function warnings when CONFIG_IOMMU_API is disabled (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156420]
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156420]
  - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156420]
  - ACPI: support BGRT table on RISC-V (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add RPMI System MSI to GSI mapping (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support to update gsi range (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Create interrupt controller list in sorted order (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Update honor list for RPMI System MSI (Mark Langsdorf) [RHEL-156420]
  - ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156420]
  - ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Add support for DBG2 RISC-V SBI port subtype (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156420]
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156420]
  - ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156420]
  - ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Add support for RISC-V in acpi_iommu_configure_id() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support for RIMT (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156420]
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156420]
  - ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: force native for Lenovo 82K8 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156420]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156420]
  - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Avoid division by zero (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix wait_queue not being removed (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer_impl.h: fix kernel-doc warnings (Jared Kangas) [RHEL-156761]
  - iio: core: Add cleanup.h support for iio_device_claim_*() (Jared Kangas) [RHEL-156761]
  - iio: core: Refactor iio_device_claim_direct() implementation (Jared Kangas) [RHEL-156761]
  - iio: core: Add and export __iio_dev_mode_lock() (Jared Kangas) [RHEL-156761]
  - iio: core: Constify struct configfs_item_operations and configfs_group_operations (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Turn iio_dma_buffer_init() void (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use lockdep for locking annotations (Jared Kangas) [RHEL-156761]
  - iio: core: add separate lockdep class for info_exist_lock (Jared Kangas) [RHEL-156761]
  - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - iio: buffer: use dma_buf_unmap_attachment_unlocked() helper (Jared Kangas) [RHEL-156761]
  - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Jared Kangas) [RHEL-156761]
  - iio: core: Clean up device correctly on iio_device_alloc() failure (Jared Kangas) [RHEL-156761]
  - iio: core: add missing mutex_destroy in iio_dev_release() (Jared Kangas) [RHEL-156761]
  - iio: backend: fix kernel-doc to avoid warnings and ensure consistency (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: enable .get_dma_dev() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: support getting the DMA channel (Jared Kangas) [RHEL-156761]
  - iio: buffer: support getting dma channel from the buffer (Jared Kangas) [RHEL-156761]
  - iio: buffer: document that buffer callback must be context safe (Jared Kangas) [RHEL-156761]
  - iio: buffer: document store_to() callback may be called in any context (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers() calling context (Jared Kangas) [RHEL-156761]
  - iio: buffer: iio_push_to_buffers_with_ts_unaligned() might_sleep() (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers_with_ts_unaligned() may sleep (Jared Kangas) [RHEL-156761]
  - iio: add IIO_ALTCURRENT channel type (Jared Kangas) [RHEL-156761]
  - iio: core: switch info_mask fields to unsigned long to match find_bit helpers (Jared Kangas) [RHEL-156761]
  - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer-cb: drop double initialization of demux list (Jared Kangas) [RHEL-156761]
  - iio: fix iio_push_to_buffers_with_ts() typo (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-lptimer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: adc: stm32-dfsdm: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: core: add ADC delay calibration definition (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix checkpatch.pl warning (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for number of lanes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data alignment (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for filter config (Jared Kangas) [RHEL-156761]
  - iio: fix potential out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: backend: fix out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Jared Kangas) [RHEL-156761]
  - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data source get (Jared Kangas) [RHEL-156761]
  - iio: Adjust internals of handling of direct mode claiming to suit new API. (Jared Kangas) [RHEL-156761]
  - iio: core: Add support for writing 64 bit attrs (Jared Kangas) [RHEL-156761]
  - MAINTAINERS: Add IIO ADC helpers (Jared Kangas) [RHEL-156761]
  - iio: adc: add helpers for parsing ADC nodes (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix docstrings (Jared Kangas) [RHEL-156761]
  - iio: core: make use of simple_write_to_buffer() (Jared Kangas) [RHEL-156761]
  - iio: backend: make sure to NULL terminate stack buffer (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for oversampling (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data size set (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for interface get (Jared Kangas) [RHEL-156761]
  - iio: core: Rework claim and release of direct mode to work with sparse. (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: add devm_iio_dmaengine_buffer_setup_with_handle() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: split requesting DMA channel from allocating buffer (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: export iio_gts_get_total_gain() (Jared Kangas) [RHEL-156761]
  - iio: introduce the FAULT event type (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: add helpers to ease searches of gain_sel and new_gain (Jared Kangas) [RHEL-156761]
  - iio: gts: Simplify available scale table build (Jared Kangas) [RHEL-156761]
  - iio: consumers: ensure read buffers for labels and ext_info are page aligned (Jared Kangas) [RHEL-156761]
  - iio: core: fix doc reference to iio_push_to_buffers_with_ts_unaligned (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer-trigger: Add check for clk_enable() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: document iio_dmaengine_buffer_setup_ext (Jared Kangas) [RHEL-156761]
  - iio: Move __private marking before struct element priv in struct iio_dev (Jared Kangas) [RHEL-156761]
  - iio: events: make IIO_EVENT_CODE macro private (Jared Kangas) [RHEL-156761]
  - iio: Mark iio_dev::priv member with __private (Jared Kangas) [RHEL-156761]
  - iio: Add channel type for attention (Jared Kangas) [RHEL-156761]
  - iio: gts: fix infinite loop for gain_to_scaletables() (Jared Kangas) [RHEL-156761]
  - iio: gts: Fix uninitialized symbol 'ret' (Jared Kangas) [RHEL-156761]
  - iio: backend: extend features (Jared Kangas) [RHEL-156761]
  - iio: events.h: add event identifier macros for differential channel (Jared Kangas) [RHEL-156761]
  - iio: backend: fix wrong pointer passed to IS_ERR() (Jared Kangas) [RHEL-156761]
  - iio: Convert unsigned to unsigned int (Jared Kangas) [RHEL-156761]
  - iio: adc: Convert to IIO_MAP() (Jared Kangas) [RHEL-156761]
  - iio: adc: Constify struct iio_map (Jared Kangas) [RHEL-156761]
  - netdev: add io_uring memory provider info (Davide Caratti) [RHEL-141853]
  - net: add helpers for setting a memory provider on an rx queue (Davide Caratti) [RHEL-141853]
  - net: page_pool: add memory provider helpers (Davide Caratti) [RHEL-141853]
  - net: prepare for non devmem TCP memory providers (Davide Caratti) [RHEL-141853]
  - net: page_pool: add a mp hook to unregister_netdevice* (Davide Caratti) [RHEL-141853]
  - net: page_pool: add callback for mp info printing (Davide Caratti) [RHEL-141853]
  - net: page_pool: create hooks for custom memory providers (Davide Caratti) [RHEL-141853]
  - net: generalise net_iov chunk owners (Davide Caratti) [RHEL-141853]
  - net: prefix devmem specific helpers (Davide Caratti) [RHEL-141853]
  - net: page_pool: don't cast mp param to devmem (Davide Caratti) [RHEL-141853]
  - selftests: drv-net-hw: inject pp_alloc_fail errors in the right place (Davide Caratti) [RHEL-141853]
  - net: page_pool: rename page_pool_is_last_ref() (Davide Caratti) [RHEL-141853]
  - net: page_pool: do not count normal frag allocation in stats (Davide Caratti) [RHEL-141853]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-240.el10]
changelog:
  - s390/syscalls: Add spectre boundary for syscall dispatch table (Ramesh Chhetri) [RHEL-183314]
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179565] {CVE-2026-45998}
  - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179565] {CVE-2026-45998}
  - x86/mce, EDAC/mce_amd: Add new SMCA bank types (Steve Best) [RHEL-100951]
  - x86/mce, EDAC/mce_amd: Update CS bank type naming (Steve Best) [RHEL-100951]
  - x86/mce, EDAC/mce_amd: Reorder SMCA bank type enums (Steve Best) [RHEL-100951]
  - tools/power turbostat: v2026.04.21 (Steve Best) [RHEL-172176]
  - tools/power turbostat: Process HT siblings in CPU order (Steve Best) [RHEL-172176]
  - tools/power turbostat: Show module_id column (Steve Best) [RHEL-172176]
  - tools/power turbostat: Print core_id and apic_id in hex (Steve Best) [RHEL-172176]
  - tools/power turbostat: Cleanup print helper functions (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix --cpu-set 1 regression on HT systems (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix --cpu-set 0 regression on HT systems (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix unrecognized option '-P' (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix AMD RAPL regression on big systems (Steve Best) [RHEL-172176]
  - vfio: replace vfio->device_class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Clean up DMABUFs before disabling function (Cédric Le Goater) [RHEL-149504]
  - vfio: remove dead notifier code (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Require vfio_device_ops.name (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Rename vfio_config_do_rw() to vfio_pci_config_rw_single() and export it (Cédric Le Goater) [RHEL-149504]
  - vfio: unhide vdev->debug_root (Cédric Le Goater) [RHEL-149504]
  - drivers/vfio_pci_core: Change PXD_ORDER check from switch case to if/else block (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Fix double free in dma-buf feature (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Support DMR and GNR-D DSA devices (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Build tests on aarch64 (Cédric Le Goater) [RHEL-149504]
  - vfio/mlx5: Add REINIT support to VFIO_MIG_GET_PRECOPY_INFO (Cédric Le Goater) [RHEL-149504]
  - vfio/mlx5: consider inflight SAVE during PRE_COPY (Cédric Le Goater) [RHEL-149504]
  - net/mlx5: Add IFC bits for migration state (Cédric Le Goater) [RHEL-149504]
  - vfio: Adapt drivers to use the core helper vfio_check_precopy_ioctl (Cédric Le Goater) [RHEL-149504]
  - vfio: Add support for VFIO_DEVICE_FEATURE_MIG_PRECOPY_INFOv2 (Cédric Le Goater) [RHEL-149504]
  - vfio: Define uAPI for re-init initial bytes during the PRE_COPY phase (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set() (Cédric Le Goater) [RHEL-149504]
  - vfio: uapi: fix comment typo (Cédric Le Goater) [RHEL-149504]
  - vfio: mdev: replace mtty_dev->vd_class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio: replace vfio->class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: fix crash in vfio_dma_mapping_mmio_test (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: only build tests on arm64 and x86_64 (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Drop IOMMU mapping size assertions for VFIO_TYPE1_IOMMU (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Add vfio_dma_mapping_mmio_test (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Align BAR mmaps for efficient IOMMU mapping (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Centralize IOMMU mode name definitions (Cédric Le Goater) [RHEL-149504]
  - vfio/mdev: update outdated comment (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Drop <uapi/linux/types.h> includes (Cédric Le Goater) [RHEL-149504]
  - platform/x86/intel/vsec: Add Nova Lake PUNIT support (Steve Best) [RHEL-95636]
  - platform/x86/intel/vsec: Add support for Wildcat Lake (Steve Best) [RHEL-95636]
  - platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe (Steve Best) [RHEL-133094]
  - platform/x86/intel/pmt: Fix kobject memory leak on init failure (Steve Best) [RHEL-133094]
  - platform/x86: intel/pmt: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-133094]
  - nvmet-fcloop: Check remoteport port_state before calling done callback (Aristeu Rozanski) [RHEL-74463]
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free (Aristeu Rozanski) [RHEL-146153]
  - Disable TPM as hwrng source on aarch64 (Štěpán Horáček) [RHEL-69440]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-241.el10]
changelog:
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185115]
  - s390: Revert support for DCACHE_WORD_ACCESS (Rafael Aquini) [RHEL-184095]
  - redhat/configs: Add CONFIG_DIBS configuration option (Mircea Dragan) [RHEL-136142]
  - net/smc: fix missing sk_err when TCP handshake fails (Mircea Dragan) [RHEL-136142]
  - net/smc: avoid early lgr access in smc_clc_wait_msg (Mircea Dragan) [RHEL-136142]
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Mircea Dragan) [RHEL-136142]
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Mircea Dragan) [RHEL-136142]
  - dibs: change dibs_class to a const struct (Mircea Dragan) [RHEL-136142]
  - Revert 'net/smc: Introduce TCP ULP support' (Mircea Dragan) [RHEL-136142]
  - dibs: Remove KMSG_COMPONENT macro (Mircea Dragan) [RHEL-136142]
  - net/smc: fix mismatch between CLC header and proposal (Mircea Dragan) [RHEL-136142]
  - net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully (Mircea Dragan) [RHEL-136142]
  - net/smc: make wr buffer count configurable (Mircea Dragan) [RHEL-136142]
  - dibs: Use subsys_initcall() (Mircea Dragan) [RHEL-136142]
  - dibs: Remove reset of static vars in dibs_init() (Mircea Dragan) [RHEL-136142]
  - smc: rename smc_find_ism_store_rc to reflect broader usage (Mircea Dragan) [RHEL-136142]
  - net/smc: fix general protection fault in __smc_diag_dump (Mircea Dragan) [RHEL-136142]
  - dibs: Check correct variable in dibs_init() (Mircea Dragan) [RHEL-136142]
  - dibs: Move event handling to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move data path to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move query_remote_gid() to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Move vlan support to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Local gid for dibs devices (Mircea Dragan) [RHEL-136142]
  - dibs: Create class dibs (Mircea Dragan) [RHEL-136142]
  - dibs: Move struct device to dibs_dev (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs_client_ops and dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs loopback (Mircea Dragan) [RHEL-136142]
  - dibs: Register ism as dibs device (Mircea Dragan) [RHEL-136142]
  - dibs: Register smc as dibs_client (Mircea Dragan) [RHEL-136142]
  - dibs: Create drivers/dibs (Mircea Dragan) [RHEL-136142]
  - net/smc: Decouple sf and attached send_buf in smc_loopback (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove error handling of unregister_dmb() (Mircea Dragan) [RHEL-136142]
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk(). (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove unused argument from 2 SMC functions (Mircea Dragan) [RHEL-136142]
  - net/smc: Improve log message for devices w/o pnetid (Mircea Dragan) [RHEL-136142]
  - net/smc: Replace use of strncpy on NUL-terminated string with strscpy (Mircea Dragan) [RHEL-136142]
  - net: Introduce netif_xmit_timeout_ms() helper (CKI Backport Bot) [RHEL-180966]
  - queue_api: add subqueue variant netif_subqueue_sent (CKI Backport Bot) [RHEL-180966]
  - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180107] {CVE-2026-46135}
  - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179772] {CVE-2026-43330}
  - Add epoch support for rv and rv-debuginfo packages (John Kacur) [RHEL-163488]
  - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - dm vdo: use GFP_NOIO for blkdev_issue_zeroout on format path (Benjamin Marzinski) [RHEL-113137]
  - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169623]
  - dm cache: fix missing return in invalidate_committed's error path (Benjamin Marzinski) [RHEL-92782]
  - dm vdo: save the formatted metadata to disk (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting logic and initialization (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add synchronous metadata I/O submission helper (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block structure (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block encoding (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add upfront validation for logical size (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting parameters to table line (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add super block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add __counted_by attribute to a number of structures (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: remove redundant TYPE argument from vdo_allocate macro (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: update vdo_allocate_extended to take a field name, no types (Benjamin Marzinski) [RHEL-113137]
  - dm vdo slab-depot: validate old zone count on load (Benjamin Marzinski) [RHEL-113137]
  - dm vdo indexer: validate saved zone count (Benjamin Marzinski) [RHEL-113137]
  - dm cache metadata: fix memory leak on metadata abort retry (Benjamin Marzinski) [RHEL-155190]
  - dm cache: prevent entering passthrough mode after unclean shutdown (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix dirty mapping checking in passthrough mode switching (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix concurrent write failure in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache policy smq: fix missing locks in invalidating cache blocks (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write hang in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write path cache coherency in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix null-deref with concurrent writes in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-168103] {CVE-2024-56603}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - dm-verity-fec: fix corrected block count stat (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: don't stop probing paths at presuspend (Benjamin Marzinski) [RHEL-148451]
  - dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski) [RHEL-154975]
  - dm: use bio_clone_blkg_association (Benjamin Marzinski) [RHEL-154975]
  - dm-unstripe: fix mapping bug when there are multiple targets in a table (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix recalculation in bitmap mode (Benjamin Marzinski) [RHEL-144458]
  - dm: clear cloned request bio pointer when last clone bio completes (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix a typo in the code for write/discard race (Benjamin Marzinski) [RHEL-154975]
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-154975]
  - dm: replace -EEXIST with -EBUSY (Benjamin Marzinski) [RHEL-154975]
  - dm: remove fake timeout to avoid leak request (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix segment info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix cache info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: advance slot index before writing slot (Benjamin Marzinski) [RHEL-154975]
  - dm raid: add documentation for takeover/reshape raid1 -> raid5 table line examples (Benjamin Marzinski) [RHEL-154975]
  - dm: ignore discard return value (Benjamin Marzinski) [RHEL-154975]
  - MAINTAINERS: add Benjamin Marzinski as a device mapper maintainer (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: Simplify the setup_scsi_dh code (Benjamin Marzinski) [RHEL-154975]
  - dm vdo: fix kerneldoc warnings (Benjamin Marzinski) [RHEL-154975]
  - dm-bufio: align write boundary on physical block size (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-136802]
  - dm: test for REQ_ATOMIC in dm_accept_partial_bio() (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove useless mempool (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: disable recursive forward error correction (Benjamin Marzinski) [RHEL-127492] {CVE-2025-71161}
  - dm-ebs: Mark full buffer dirty even on partial write (Benjamin Marzinski) [RHEL-154975]
  - dm mpath: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-154975]
  - dm verity fec: Expose corrected block count via status (Benjamin Marzinski) [RHEL-154975]
  - dm: Don't warn if IMA_DISABLE_HTABLE is not enabled (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove log message with shash driver name (Benjamin Marzinski) [RHEL-154975]
  - dm: sysfs: use sysfs_emit() in dm-sysfs.c (Benjamin Marzinski) [RHEL-154975]
  - dm: remove useless md->nr_zones variable (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: use folio_nr_pages() instead of shift operation (Benjamin Marzinski) [RHEL-136802]
  - dm: fix failure when empty flush's bi_sector points beyond the device end (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: zero cache_info before default init (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: reuse meta_addr in pcache_meta_find_latest (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: allow built-in build and rename flush helper (Benjamin Marzinski) [RHEL-154975]
  - dm raid: use proper md_ro_state enumerators (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: prefer synchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: enable asynchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: rename internal_hash (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: add the "offset" argument (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: allocate the recalculate buffer with kmalloc (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: introduce integrity_kmap and integrity_kunmap (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: replace bvec_kmap_local with kmap_local_page (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: use internal variable for digestsize (Benjamin Marzinski) [RHEL-136802]
  - dm vdo: Update code to use mem_is_zero (Benjamin Marzinski) [RHEL-154975]
  - dm: optimize REQ_PREFLUSH with data when using the linear target (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: use int type to store negative error codes (Benjamin Marzinski) [RHEL-154975]
  - dm: fix "writen"->"written" (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: cleanup: fix coding style report by checkpatch.pl (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: remove ctrl_lock for pcache_cache_segment (Benjamin Marzinski) [RHEL-154975]
  - redhat/configs: Add CONFIG_DM_PCACHE (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: add persistent cache target in device-mapper (Benjamin Marzinski) [RHEL-154975]
  - dm error: mark as DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-154975]
  - dm-vdo: Promote dm-vdo title to title heading (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fixed spelling mistakes in documentation (Benjamin Marzinski) [RHEL-154975]
  - dm bufio: remove redundant __GFP_NOWARN (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: drop a useless argument (Benjamin Marzinski) [RHEL-154975]
  - dm: use vmalloc_array() to simplify code (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: more strlen() drops (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fix typos in delay.rst and vdo-design.rst (Benjamin Marzinski) [RHEL-154975]
  - RDMA/bnxt_re: fix dma_free_coherent() pointer (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to use correct page size for PDE table (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() (Sreekanth Reddy) [RHEL-135357] {CVE-2025-71092}
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Pass correct flag for dma mr creation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix the inline size for GenP7 devices (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix wrong check for CQ coalesc support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add a debugfs entry for CQE coalescing tuning (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a potential memory leak in destroy_gsi_sqp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: improve clarity in ALLOC_PAGE handler (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove non-statistics counters from hw_counters (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add debugfs info entry for device and resource information (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect errno used in function comments (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Avoid GID level QoS update from the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Update sysfs entries with appropriate data (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Call strscpy() with correct size argument (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove unnecessary condition checks (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Use firmware provided message timeout value (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Initialize fw with roce_mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for flow create/destroy (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for mirror vnic (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for unique GID (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor stats context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor hw context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add data structures for RoCE mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Enhance a log message when bnxt_re_register_netdev fails (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Delete always true SGID table check (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Report udp source port for flow_label in bnxt_re_query_qp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE related hardware counters update (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Optimize bnxt_qplib_get_dev_attr function (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE Driver Dynamic Debug for HWRM's (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Show srq_limit in fill_res_srq_entry hook (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to initialize the PBL array (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a possible memory leak in the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to do SRQ armena by default (Sreekanth Reddy) [RHEL-135357]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-242.el10]
changelog:
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179758] {CVE-2026-43414}
  - sched/fair: Fix wakeup_preempt_fair() for not waking up task (Phil Auld) [RHEL-174703]
  - sched/fair: Fix overflow in vruntime_eligible() (Phil Auld) [RHEL-174703]
  - sched/fair: Clear rel_deadline when initializing forked entities (Phil Auld) [RHEL-174703]
  - sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue (Phil Auld) [RHEL-174703]
  - sched/deadline: Use revised wakeup rule for dl_server (Phil Auld) [RHEL-174703]
  - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() (Phil Auld) [RHEL-174703]
  - sched/debug: Fix avg_vruntime() usage (Phil Auld) [RHEL-174703]
  - sched/fair: Fix zero_vruntime tracking fix (Phil Auld) [RHEL-174703] {CVE-2026-43323}
  - NFS: write_completion: dereference loop-local req, not hdr->req (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Report whether fh_key was actually updated (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: prevent out-of-bounds read in __cache_seq_start() (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix overlapping extents returned for pNFS LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix use of uninitialized imap in xfs_fs_map_blocks error path (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Fix infinite loop in layout state revocation (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: start cache request seqno at 1 to fix netlink GET_REQS (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on COPY in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on CLONE in presense of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix file change detection in CB_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - net/handshake: Add new parameter 'HANDSHAKE_A_ACCEPT_KEYRING' (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix RCU dereference of cl_xprt in nfs_compare_super_address (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove redundant __private attribute from nfs_page_class (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.2: fix CLONE/COPY attrs in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix writeback in presence of errors (Olga Kornievskaia) [RHEL-171581]
  - nfs: use memcpy_and_pad in decode_fh (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.1: Apply session size limits on clone path (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: retry GETATTR if GET_DIR_DELEGATION failed (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix RENAME attr in presence of directory delegations (Olga Kornievskaia) [RHEL-171581]
  - pnfs/flexfiles: validate ds_versions_cnt is non-zero (Olga Kornievskaia) [RHEL-171581]
  - NFS/blocklayout: print each device used for SCSI layouts (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Post receive buffers after RPC completion (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Scale receive batch size with credit window (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Replace rpcrdma_mr_seg with xdr_buf cursor (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decouple frwr_wp_create from frwr_map (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Avoid 250 ms delay on backlog wakeup (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close sendctx get/put race that can block a transport (Olga Kornievskaia) [RHEL-171581]
  - nfs: update inode ctime after removexattr operation (Olga Kornievskaia) [RHEL-171581]
  - nfs: fix utimensat() for atime with delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-171581]
  - NFSv4/pnfs: If the server is down, retry the layout returns on reboot (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfsxdr (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfs3xdr (Olga Kornievskaia) [RHEL-171581]
  - NFSD: convert callback RPC program to per-net namespace (Olga Kornievskaia) [RHEL-171581]
  - NFSD: use per-operation statidx for callback procedures (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Use contiguous pages for RDMA Read sink buffers (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Add svc_rqst_page_release() helper (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: xdr.h: fix all kernel-doc warnings (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Factor out WR chain linking into helper (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add Write chunk WRs to the RPC's Send WR chain (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device in Receive paths (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add fair queuing for Send Queue access (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Optimize rq_respages allocation in svc_alloc_arg (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Track consumed rq_pages entries (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Handle NULL entries in svc_rqst_release_pages (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Allocate a separate Reply page array (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Tighten bounds checking in svc_rqst_replace_page (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Sign filehandles (Olga Kornievskaia) [RHEL-171581]
  - NFSD/export: Add sign_fh export option (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a key for signing filehandles (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use dynamic allocation for oversized NFSv4.0 replay cache (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split cache_detail queue into request and reader lists (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_wait from global to per-cache-detail waitqueue (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_lock from global spinlock to per-cache-detail lock (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Add XPT flags missing from SVC_XPRT_FLAG_LIST (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove dead code from fs/lockd/xdr4.c (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove C macros that are no longer used (Olga Kornievskaia) [RHEL-171581]
  - lockd: Add LOCKD_SHARE_SVID constant for DOS sharing mode (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 FREE_ALL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NM_LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNSHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Prepare share helpers for xdrgen conversion (Olga Kornievskaia) [RHEL-171581]
  - lockd: Hoist file_lock init out of nlm4svc_decode_shareargs() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Convert server-side undefined procedures to xdrgen (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SM_NOTIFY procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Refactor nlm4svc_callback() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NULL procedure (Olga Kornievskaia) [RHEL-171581]
  - Documentation: Add the RPC language description of NLM version 4 (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Enforce timeout on layout recall and integrate lease manager fencing (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Fix compilation error (`make W=1`) when dprintk() is no-op (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Kill RPC_IFDEBUG() (Olga Kornievskaia) [RHEL-171581]
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate svc_version definitions to XDR layer (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move nlm4svc_set_file_lock_range() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Make linux/lockd/nlm.h an internal header (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove lockd/debug.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate include/linux/lockd/lockd.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move share.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr4.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - NFS: Use nlmclnt_shutdown_rpc_clnt() to safely shut down NLM (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate nlmsvc_unlock API declarations (Olga Kornievskaia) [RHEL-171581]
  - lockd: Have nlm_fopen() return errno values (Olga Kornievskaia) [RHEL-171581]
  - lockd: Introduce nlm__int__deadlock (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate and rename nlm_drop_reply (Olga Kornievskaia) [RHEL-171581]
  - lockd: Simplify cast_status() in svcproc.c (Olga Kornievskaia) [RHEL-171581]
  - nfsd: remove NFSD_V4_DELEG_TIMESTAMPS Kconfig option (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add a runtime switch for disabling delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Replace KUnit tests for memcmp() with KUNIT_EXPECT_MEMEQ_MSG() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Track SCSI Persistent Registration Fencing per Client with xarray (Olga Kornievskaia) [RHEL-171581]
  - sunrpc/cache: improve RCU safety in cache_list walking. (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: move rq_cachetype into struct nfsd_thread_local_info (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: add svc_rqst->rq_private pointer and remove rq_lease_breaker (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: fix cache_request leak in cache_release (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31400}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31403}
  - nfsd: switch purge_old() to use start_removing_noperm() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix NFS KConfig typos (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decrement re_receiving on the early exit paths (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43469}
  - nfsd: report the requested maximum number of threads instead of number running (Olga Kornievskaia) [RHEL-171581]
  - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43470}
  - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43394}
  - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-23297}
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Olga Kornievskaia) [RHEL-171581]
  - nfs: nfs4proc: Convert comma to semicolon (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Change list definition method (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: rpc_debug and others are defined even if CONFIG_SUNRPC_DEBUG unset (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: limit lease period in nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: pass lease period in seconds to nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - fs/nfs: Fix readdir slow-start regression (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix delayed delegation return handling (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify error handling in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: fold nfs_abort_delegation_return into nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the delegation == NULL check in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use bool for the issync argument to nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from ->return_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from nfs4_inode_make_writeable (Olga Kornievskaia) [RHEL-171581]
  - NFS: Merge CONFIG_NFS_V4_1 with CONFIG_NFS_V4 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a way to disable NFS v4.0 via KConfig (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFS_V4_0 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move sequence slot operations into minorversion operations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Pass a struct nfs_client to nfs4_init_sequence() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move NFS v4.0 pathdown recovery into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_init_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_shutdown_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Make the various NFS v4.0 operations static again (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move the NFS v4.0 minor version ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_mig_recovery_ops to nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_state_renewal_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_nograce_recovery_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_reboot_recovery_ops into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_call_sync_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - exportfs: clarify the documentation of open()/permission() expotrfs ops (Olga Kornievskaia) [RHEL-171581]
  - nfsd: do not allow exporting of special kernel filesystems (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX ACL file attributes to SUPPATTR bitmasks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX draft ACL support to the NFSv4 SETATTR operation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for POSIX draft ACLs for file creation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for XDR decoding POSIX draft ACLs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Refactor nfsd_setattr()'s ACL error reporting (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Do not allow NFSv4 (N)VERIFY to check POSIX ACL attributes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_access_acl (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_default_acl (Olga Kornievskaia) [RHEL-171581]
  - lsm,nfs: fix memory leak of lsm_context (Olga Kornievskaia) [RHEL-171581]
  - lsm: lsm_context in security_dentry_init_security (Olga Kornievskaia) [RHEL-171581]
  - lsm: use lsm_context in security_inode_getsecctx (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform_scope (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform (Olga Kornievskaia) [RHEL-171581]
  - Add RPC language definition of NFSv4 POSIX ACL extension (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a Kconfig setting to enable support for NFSv4 POSIX ACLs (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFSD_V4_POSIX_ACLS (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement pass-through lines in specifications (Olga Kornievskaia) [RHEL-171581]
  - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add controls to set the minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - nfsd: adjust number of running nfsd threads based on activity (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allow svc_recv() to return -ETIMEDOUT and -EBUSY (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split new thread creation into a separate function (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: introduce the concept of a minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: track the max number of requested threads in a pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: remove special handling of NULL pool from svc_start/stop_kthreads() (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split svc_set_num_threads() into two functions (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: use bvec-based RDMA read/write API (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Add enum value validation to generated decoders (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Emit a max_arg_sz macro (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Extend error reporting to AST transformation phase (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Improve parse error reporting (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Remove inclusion of nlm4.h header (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id (Olga Kornievskaia) [RHEL-171581]
  - nfsd: never defer requests during idmap lookup (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Initialize data pointer for zero-length items (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix setting FMODE_NOCMTIME in nfs4_open_delegation (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement short (16-bit) integer types (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use workqueue enable/disable APIs for v4_end_grace sync (Olga Kornievskaia) [RHEL-171581]
  - NFS: NFSERR_INVAL is not defined by NFSv2 (Olga Kornievskaia) [RHEL-171581]
  - nfsd: prefix notification in nfsd4_finalize_deleg_timestamps() with "nfsd: " (Olga Kornievskaia) [RHEL-171581]
  - locks: ensure vfs_test_lock() never returns FILE_LOCK_DEFERRED (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Generate "if" instead of "switch" for boolean union enumerators (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add instructions on how to deal with xdrgen files (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Clean up nfsd4_check_open_attributes() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: switch nfs_local_do_read and nfs_local_do_write to return void (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: remove -EAGAIN handling in nfs_local_doio() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Cleanup the nfs_local_pgio_done() parameters (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Handle short writes by retrying (Olga Kornievskaia) [RHEL-171581]
  - NFS: make nfs_mark_return_unreferenced_delegations less aggressive (Olga Kornievskaia) [RHEL-171581]
  - NFS: return delegations from the end of a LRU when over the watermark (Olga Kornievskaia) [RHEL-171581]
  - NFS: add a separate delegation return list (Olga Kornievskaia) [RHEL-171581]
  - NFS: reformat nfs_mark_delegation_revoked (Olga Kornievskaia) [RHEL-171581]
  - NFS: use a local RCU critical section in nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use refcount_inc_not_zero nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: don't consume a delegation reference in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: take a delegation reference in nfs4_get_valid_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify the detached delegation check in update_open_stateid (Olga Kornievskaia) [RHEL-171581]
  - NFS: move the deleg_cur check out of nfs_detach_delegation_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: return bool from nfs_detach_delegation{,_locked} (Olga Kornievskaia) [RHEL-171581]
  - NFS: move delegation lookup into can_open_delegated (Olga Kornievskaia) [RHEL-171581]
  - NFS: rewrite nfs_delegations_present in terms of nr_active_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_free_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: open code nfs_delegation_need_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove NFS_DELEGATION_INODE_FREEING (Olga Kornievskaia) [RHEL-171581]
  - NFS: drop the _locked postfix from nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: assert rcu_read_lock is held in nfs_start_delegation_return_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_inode_detach_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the NULL inode check in nfs4_inode_return_delegation_on_close (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_all_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_unused_delegation_types (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove __nfs_client_for_each_server (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Mark struct export_operations functions at kernel-doc (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Fix kernel-doc output for get_name() (Olga Kornievskaia) [RHEL-171581]
  - docs: exportfs: Use source code struct documentation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Don't immediately return directory delegations when disabled (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.x: Directory delegations don't require any state recovery (Olga Kornievskaia) [RHEL-171581]
  - nfs: unify security_inode_listsecurity() calls (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Don't free slots prematurely if requesting a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Fix nfs_clear_verifier_delegated() for delegated directories (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix directory delegation verifier checks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: net ref data still needs to be freed even if net hasn't startup (Olga Kornievskaia) [RHEL-171581]
  - nfsd: provide locking for v4_end_grace (Olga Kornievskaia) [RHEL-171581] {CVE-2026-22980}
  - NFSD: Remove NFSERR_EAGAIN (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use ATTR_DELEG in nfsd4_finalize_deleg_timestamps() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: NFSv4 file creation neglects setting ACL (Olga Kornievskaia) [RHEL-171581] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Handle NFS4ERR_NOTSUPP errors for directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Separate lists (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Wrap shell snippets in literal code blocks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add toctree entry for NFSD IO modes docs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: add Documentation/filesystems/nfs/nfsd-io-modes.rst (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS WRITE (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix up the automount fs_context to use the correct cred (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add trace point for SCSI fencing operation. (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a module option to disable directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Shortcut lookup revalidations if we have a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation during RENAME (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation on ACCESS, CREATE, and UNLINK (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add support for sending GDD_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - nfsd: Use MD5 library instead of crypto_shash (Olga Kornievskaia) [RHEL-171581]
  - nfsd: stop pretending that we cache the SEQUENCE reply. (Olga Kornievskaia) [RHEL-171581]
  - NFS: nfsd-maintainer-entry-profile: Inline function name prefixes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a subsystem policy document (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allocate a separate bvec array for socket sends (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Improve "fragment too large" warning (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS READ (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Relocate the xdr_reserve_space_vec() call site (Olga Kornievskaia) [RHEL-171581]
  - NFSD: pass nfsd_file to nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Support multiple extents per LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Introduce layout content structure (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Increase the server's default RPC/RDMA credit grant (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Update comment documenting unsupported fattr4 attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: delete unreachable confusing code in nfs4_open_delegation() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add array bounds-checking in nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - nfsd: switch the default for NFSD_LEGACY_CLIENT_TRACKING to "n" (Olga Kornievskaia) [RHEL-171581]
  - nfsd: change nfs4_client_to_reclaim() to allocate data (Olga Kornievskaia) [RHEL-171581]
  - nfsd: move name lookup out of nfsd4_list_rec_dir() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Define actions for the new time_deleg FATTR4 attributes (Olga Kornievskaia) [RHEL-171581] {CVE-2025-40326}
  - NFSD: Allow layoutcommit during grace period (Olga Kornievskaia) [RHEL-171581]
  - fs: lift the FMODE_NOCMTIME check into file_update_time_flags (Olga Kornievskaia) [RHEL-171581]
  - fs: refactor file timestamp update logic (Olga Kornievskaia) [RHEL-171581]
  - nfsd: freeze c/mtime updates with outstanding WRITE_ATTRS delegation (Olga Kornievskaia) [RHEL-171581]
  - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172775] {CVE-2026-43056}
  - bonding: 3ad: Add support for 1600G speed (Kamal Heib) [RHEL-165176]
  - net: ethtool: Add support for 1600Gbps speed (Kamal Heib) [RHEL-165176]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-243.el10]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-178260]
  - nvme: make nvme_add_ns{_head}_cdev return void (Utkarsh Singh) [RHEL-186079]
  - nvme: fix crash and memory leak during invalid cdev teardown (Utkarsh Singh) [RHEL-186079]
  - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-185104]
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185661]
  - net/sched: fix pedit partial COW leading to page cache corruption (CKI Backport Bot) [RHEL-177381] {CVE-2026-46331}
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-176465] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-176465]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180700] {CVE-2026-31530}
  - s390/uv: Fix comment of uv_find_secret() function (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Fix memory leak with CCA cards used as accelerator (Mircea Dragan) [RHEL-136440]
  - crypto: s390/paes - Refuse clear key material by default (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Support new xflag PKEY_XFLAG_NOCLEARKEY (Mircea Dragan) [RHEL-136440]
  - crypto: skcipher - Add new helper function crypto_skcipher_tested (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Select crypto engine in Kconfig when PAES is chosen (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Extend protected key conversion retry loop (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Rework protected key AES for true asynch support (Mircea Dragan) [RHEL-136440]
  - s390/cpacf: Rework cpacf_pcc() to return condition code (Mircea Dragan) [RHEL-136440]
  - s390/pkey/crypto: Introduce xflags param for pkey in-kernel API (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Provide and pass xflags within pkey and zcrypt layers (Mircea Dragan) [RHEL-136440]
  - s390/uv: Remove uv_get_secret_metadata function (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Use preallocated memory for retrieve of UV secret metadata (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework EP11 pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework CCA pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 misc functions to use cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Locate ep11_domain_query_info onto the stack instead of kmalloc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Propagate xflags argument with cca_get_info() (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca misc functions kmallocs to use the cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove CCA and EP11 card and domain info caches (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove unused functions from cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for ep11 misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework zcrypt function zcrypt_device_status_mask_ext (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for ep11 misc functions (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for cca misc functions (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: New xflag parameter (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Avoid alloc and copy of ep11 targets if kernelspace cprb (Mircea Dragan) [RHEL-136440]
  - s390/ap: Introduce ap message buffer pool (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: Rework AP message buffer allocation (Mircea Dragan) [RHEL-136440]
  - s390/ap: Move response_type struct into ap_msg struct (Mircea Dragan) [RHEL-136440]
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179311] {CVE-2026-46090}
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add capability that forwards operation exceptions (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136477]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136477]
  - rhashtable: Fix rhashtable_try_insert test (Herton R. Krzesinski) [RHEL-115002]
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock (Herton R. Krzesinski) [RHEL-115002]


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Julien Rische <jrische@redhat.com> - 1.21.3-11
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171587 RHEL-171595


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.12-1
changelog:
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - Translated using Weblate (Czech) (jsefler@redhat.com)
  - fix(test): Fix unit tests of "sub-man status" (jhnidek@redhat.com)
  - RHEL-126153: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - fix: Print list of environments without --set/--list (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix(ci): Fixed integration tests of syspurpose (jhnidek@redhat.com)
  - chore: Removed deprecated information from setup.py (jhnidek@redhat.com)
  - chore(ci): Specify permissions for Actions (mhorky@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - docs: added missing gettext building dependency (manuelcanorojo@gmail.com)
  - docs: improved man content related to subscription-manager environment
    variables for proxy configuration (manuelcanorojo@gmail.com)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix gobject python package name of sles (suttner@atix.de)
  - Fix SLES build on OBS (suttner@atix.de)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.13-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - chore: Make black-26.* happy again (./) (jhnidek@redhat.com)
  - chore: Update black to 26.3.1 in GitHub action yml file (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./integration-tests) (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./test) (jhnidek@redhat.com)
  - test: Fixed one unit test related to inotify (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./src) (jhnidek@redhat.com)
  - chore: style formatting fixes in rhsmcertd worker (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when auto-registration is terminated early
    (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when system is already registered
    (jajerome@redhat.com)
  - chore(deps): bump black from 24.3.0 to 26.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore(deps): bump black from 24.3.0 to 26.3.1 in /integration-tests
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: allow system to be registered with broken insights-client
    (jlocash@redhat.com)
  - fix: skip package profile upload when disabled in config
    (jajerome@redhat.com)
  - fix(unit-tests): mock isdir so rhsm_debug tests are env agnostic
    (csnyder@redhat.com)
  - ci: bump actions/upload-artifact from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: Handle non-existence of /var/cache/cloud-what gracefully
    (jhnidek@redhat.com)
  - fix(unit-tests): Fixed unit tests for rhsm-debug (jhnidek@redhat.com)
  - feat: Add /var/cache/cloud-what/ to sos-report (jhnidek@redhat.com)


author: Jason Jerome <jajerome@redhat.com> 1.30.14-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Automatic commit of package [subscription-manager] release [1.30.13-1].
    (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.15-1
changelog:
  - chore: better definition of IP address of AWS IMDS (jhnidek@redhat.com)
  - Fix package upload during initial register (suttner@atix.de)
  - feat(pqc): update crypto capabilities from 'refresh' command
    (jlocash@redhat.com)
  - feat(pqc): update crypto capabilities from 'identity --regenerate' command
    (jlocash@redhat.com)
  - style: fix flake8 lint error (jlocash@redhat.com)
  - feat(pqc): update crypto capabilities in candlepin from rhsmcertd-worker
    (jlocash@redhat.com)
  - feat(pqc): implement cache for crypto capabilities (jlocash@redhat.com)
  - fix: Invalidate and update CurrentOwnerCache when owner change is detected
    (csnyder@redhat.com)
  - chore: Added more debug prints about closing connections (jhnidek@redhat.com)
  - fix: Set timeout before trying to close TLS connection (jhnidek@redhat.com)
  - fix(pqc): update warning to indicate fallback (jlocash@redhat.com)
  - fix(pqc): raise RuntimeError when get_signature_algorithms or
    get_public_key_algorithms throw (jlocash@redhat.com)
  - feat(pqc): print warning when setting invalid `certificate_algorithms` value
    (jlocash@redhat.com)
  - docs: Document `rhsm.certificate_algorithms` config option in rhsm.conf man
    pages (jlocash@redhat.com)
  - fix: drop __smoke_test__ and __main__ from pqc.py (jlocash@redhat.com)
  - style: fix linting error in connection.py (jlocash@redhat.com)
  - test: fix broken tests for registerConsumer (jlocash@redhat.com)
  - feat(pqc): Use C bindings to retrieve public-key and signature algorithms in
    pqc.py (jlocash@redhat.com)
  - feat: POC: Add support for PQC (jhnidek@redhat.com)
  - Remove cron RPM requirement on suse systems (suttner@atix.de)
  - test: Added C unit tests of _certificate.so (jhnidek@redhat.com)
  - feat: Added .pyi file for certificate.c (jhnidek@redhat.com)
  - chore: Not all .py* files should be ignored (jhnidek@redhat.com)
  - test: Created unit tests for certificate.c (jhnidek@redhat.com)
  - feat: Added 2 methods for listing crypto algorithms (jhnidek@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-13
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161334)


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Paul Evans <pevans@redhat.com> - 0.32-16
changelog:
  - lsscsi: Fixes for SBP (Firewire) host in transport_h_init() (RHEL-48228)
  - lsscsi: Change default output trailing space after each device entry (RHEL-70371)
  - lsscsi: Transport type FC and FCOE output inconsistencies (RHEL-155569)
  - lsscsi: Device name spacing before major:minor dev dev names exceeds 9 chars (RHEL-157252)


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Jakub Čajka <jcajka@redhat.com> - 3:200-1
changelog:
  - Update to latest upstream version
  - Resolves: RHEL-20091, RHEL-20085, RHEL-20556, RHEL-47461 and RHEL-37248


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90836
  - Resolves: #RHEL-90839


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-4.el10]
changelog:
  - spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
  - tests: py: Update payload records (Phil Sutter) [RHEL-128553]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
  - tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
  - netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
  - expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
  - intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - Rebase to OpenSC 0.27.1 fixing outstanding security reports and bring in new PQC features (RHEL-151598)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163365
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155178
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164740
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166239
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166223
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166191
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166207


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
changelog:
  - Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
    Related: RHEL-92932
  - Add missing NULL check for server key generation in ML-KEM hybrids
    Resolves: RHEL-168106


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.81-1
changelog:
  - Update to latest upstream version with better support for latest OSes,
    closes rhbz#2090942
  - Remove 'which' dependency, closes rhbz#2111531
  - Add support for detecting EFI shell binary (shell.efi), closes rhbz#2101953
  - Add support for Win 11 on ARM 64 systems


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


