# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-229.el10]
changelog:
  - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176448] {CVE-2026-46333}
  - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174757] {CVE-2026-43303}
  - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171616] {CVE-2026-23375}
  - anon_inode: rework assertions (Rafael Aquini) [RHEL-171616]
  - vfs: use the new debug macros in inode_set_cached_link() (Rafael Aquini) [RHEL-171616]
  - vfs: catch invalid modes in may_open() (Rafael Aquini) [RHEL-171616]
  - vfs: add initial support for CONFIG_DEBUG_VFS (Rafael Aquini) [RHEL-171616]
  - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add open() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add exec() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chmod() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chown() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests: add file SLAB_TYPESAFE_BY_RCU recycling stressor (Rafael Aquini) [RHEL-171616]
  - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171616]
  - coccinelle: kmalloc_obj: Remove default GFP_KERNEL arg (Michal Schmidt) [RHEL-174796]
  - default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (Michal Schmidt) [RHEL-174796]
  - add default_gfp() helper macro and use it in the new *alloc_obj() helpers (Michal Schmidt) [RHEL-174796]
  - coccinelle: Add kmalloc_objs conversion script (Michal Schmidt) [RHEL-174796]
  - slab.h: disable completely broken overflow handling in flex allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_flex() and family (Michal Schmidt) [RHEL-174796]
  - compiler_types: Introduce __flex_counter() and family (Michal Schmidt) [RHEL-174796]
  - checkpatch: Suggest kmalloc_obj family for sizeof allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_obj() and family (Michal Schmidt) [RHEL-174796]
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (David Marlin) [RHEL-172460 RHEL-172865] {CVE-2026-31772}
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-172460]
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-172460]
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate LTK enc_size on load (David Marlin) [RHEL-172460 RHEL-172580] {CVE-2026-43020}
  - Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: move wake reason storage into validated event handlers (David Marlin) [RHEL-172460]
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (David Marlin) [RHEL-172460 RHEL-172607] {CVE-2026-43023}
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_aml: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Enable HFP hardware offload for WCN6855 and WCN7850 (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Refactor HFP hardware offload capability handling (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Remove duplicate entry for 0x13d3/0x3618 (David Marlin) [RHEL-172460]
  - Bluetooth: btintel: Remove unneeded CONFIG_PM* #ifdef's (David Marlin) [RHEL-172460]
  - Bluetooth: btnxpuart: Remove unneeded CONFIG_PM ifdef (David Marlin) [RHEL-172460]
  - Bluetooth: btintel_pcie: Remove unnecessary check before kfree_skb() (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Reject autosuspend if discovery is active (David Marlin) [RHEL-172460]
  - Bluetooth: hci_core: Export hci_discovery_active (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: Fix using PHYs bitfields as PHY value (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: Add WCN6855 firmware priority selection feature (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: move WCN7850 workaround to the caller (David Marlin) [RHEL-172460]
  - Bluetooth: btmtksdio: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: hci_bcm4377: Use generic power management (David Marlin) [RHEL-172460]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174522] {CVE-2026-43284}
  - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-170705]
  - iommu/arm-smmu-v3: Fix typos introduced by arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Do not continue in __arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Perform per-domain invalidations using arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add arm_smmu_invs based arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Populate smmu_domain->invs when attaching masters (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Pre-allocate a per-master invalidation array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Introduce a per-domain arm_smmu_invs array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add an inline arm_smmu_domain_free() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Explicitly set smmu_domain->stage for SVA (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Jerry Snitselaar) [RHEL-88961]
  - sort.h: hoist cmp_int() into generic header file (Jerry Snitselaar) [RHEL-88961]
  - lib/sort.c: add _nonatomic() variants with cond_resched() (Jerry Snitselaar) [RHEL-88961]
  - lib/list_sort: clarify comparison function requirements in list_sort() (Jerry Snitselaar) [RHEL-88961]
  - lib/sort: clarify comparison function requirements in sort_r() (Jerry Snitselaar) [RHEL-88961]
  - cgroup/cpuset: Skip security check for hotplug induced v1 task migration (Waiman Long) [RHEL-160958]
  - cgroup/cpuset: Simplify setsched decision check in task iteration loop of cpuset_can_attach() (Waiman Long) [RHEL-160958]
  - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-93825]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-230.el10]
changelog:
  - powercap: intel_rapl: Add support for Nova Lake processors (Steve Best) [RHEL-117269]
  - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171638]
  - selftests/bpf: Ensure typedef are deduplicated in split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix deduplication of typedef with base definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Remove static qualifier from local subprog pointer (Jerome Marchand) [RHEL-139985]
  - bpf: Fix ld_{abs,ind} failure path analysis in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Propagate error from visit_tailcall_insn (Jerome Marchand) [RHEL-139985]
  - ftrace,bpf: Remove FTRACE_OPS_FL_JMP ftrace_ops flag (Jerome Marchand) [RHEL-139985]
  - ftrace: Fix address for jmp mode in t_show() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add regression test for bpf_d_path() (Jerome Marchand) [RHEL-139985]
  - bpf: Fix verifier assumptions of bpf_d_path's output buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for truncated dmabuf_iter reads (Jerome Marchand) [RHEL-139985]
  - bpf: Fix truncated dmabuf iterator reads (Jerome Marchand) [RHEL-139985]
  - x86/unwind/orc: Support reliable unwinding through BPF stack frames (Jerome Marchand) [RHEL-139985]
  - bpf: Add bpf_has_frame_pointer() (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix -Wdiscarded-qualifiers under C23 (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix build warnings due to MS extensions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add -fms-extensions to bpf build flags (Jerome Marchand) [RHEL-139985]
  - bpf: optimize bpf_map_update_elem() for map-in-map types (Jerome Marchand) [RHEL-139985]
  - bpf: make kprobe_multi_link_prog_run always_inline (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add success stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Precede non-head waiter queueing with AA check (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable spinning for trylock fallback (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Use trylock fallback when per-CPU rqnode is busy (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Perform AA checks immediately (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Enclose lock/unlock within lock entry acquisitions (Jerome Marchand) [RHEL-139985]
  - bpf: Remove runqslower tool (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Remove usage of lsm/file_alloc_security in selftest (Jerome Marchand) [RHEL-139985]
  - bpf: Disable file_alloc_security hook (Jerome Marchand) [RHEL-139985]
  - bpf: check for insn arrays in check_ptr_alignment (Jerome Marchand) [RHEL-139985]
  - bpf: force BPF_F_RDONLY_PROG on insn array creation (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Make CS length configurable for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add lock wait time stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Relax CPU requirements for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - bpf: Introduce internal bpf_map_check_op_flags helper function (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix some incorrect @param descriptions in the comment of libbpf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Call bpf_get_numa_node_id() in trigger_count() (Jerome Marchand) [RHEL-139985]
  - docs: bpf: map_array: Specify BPF_MAP_TYPE_PERCPU_ARRAY value size limit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix htab_update/reenter_update selftest failure (Jerome Marchand) [RHEL-139985]
  - bpf: implement "jmp" mode for trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: specify the old and new poke_type for bpf_arch_text_poke (Jerome Marchand) [RHEL-139985]
  - bpf,x86: adjust the "jmp" mode for bpf trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: fix the usage of BPF_TRAMP_F_SKIP_FRAME (Jerome Marchand) [RHEL-139985]
  - x86/ftrace: Implement DYNAMIC_FTRACE_WITH_JMP (Jerome Marchand) [RHEL-139985]
  - ftrace: Introduce FTRACE_OPS_FL_JMP (Jerome Marchand) [RHEL-139985]
  - bpf: cleanup aux->used_maps after jit (Jerome Marchand) [RHEL-139985]
  - selftests: bpf: Add tests for unbalanced rcu_read_lock (Jerome Marchand) [RHEL-139985]
  - bpf: support nested rcu critical sections (Jerome Marchand) [RHEL-139985]
  - bpf: test the correct stack liveness of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: correct stack liveness for tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: test the proper verification of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: properly verify tail call behavior (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Jerome Marchand) [RHEL-139985]
  - bpf: Document cfi_stubs and owner fields in struct bpf_struct_ops (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names (Jerome Marchand) [RHEL-139985]
  - bpf: don't skip other information if xlated_prog_insns is skipped (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: Move desc->imm setup to sort_kfunc_descs_by_imm_off() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Align kfuncs renamed in bpf tree (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add BTF dedup tests for recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix BTF dedup to support recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix failure paths in send_signal test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Convert glob_match() to bpf arena (Jerome Marchand) [RHEL-139985]
  - bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Jerome Marchand) [RHEL-139985]
  - bpf: Add missing checks to avoid verbose verifier log (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: retry bpf_map_update_elem() when E2BIG is returned (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test to verify freeing the special fields in pcpu maps (Jerome Marchand) [RHEL-139985]
  - bpf: Free special fields when update [lru_,]percpu_hash maps (Jerome Marchand) [RHEL-139985]
  - bpf: Adjust return value for queue destruction in rqspinlock (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add C-level selftests for indirect jumps (Jerome Marchand) [RHEL-139985]
  - libbpf: support llvm-generated indirect jumps (Jerome Marchand) [RHEL-139985]
  - bpf: disasm: add support for BPF_JMP|BPF_JA|BPF_X (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: test instructions arrays with blinding (Jerome Marchand) [RHEL-139985]
  - bpf: support instructions arrays with constants blinding (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add selftests for new insn_array map (Jerome Marchand) [RHEL-139985]
  - libbpf: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpftool: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpf, x86: add new map type: instructions array (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test parsing of (multi-)split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix parsing of multi-split BTF (Jerome Marchand) [RHEL-139985]
  - docs/bpf: Add missing BPF k/uprobe program types to docs (Jerome Marchand) [RHEL-139985]
  - libbpf: Update the comment to remove the reference to the deprecated interface bpf_program__load(). (Jerome Marchand) [RHEL-139985]
  - libbpf: Complete the missing @param and @return tags in btf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - bpf: Skip bounds adjustment for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add ABBCCA case for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable queue destruction for deadlocks (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix intermittent failures in file_reader test (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix the incorrect reference to the memlock_rlim variable in the comment. (Jerome Marchand) [RHEL-139985]
  - libbpf: Optimize the redundant code in the bpf_object__init_user_btf_maps() function. (Jerome Marchand) [RHEL-139985]
  - bpf: Fix stackmap overflow check in __bpf_get_stackid() (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor stack map trace depth calculation into helper function (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix missing closing parethesis for BTF_KIND_UNKN (Jerome Marchand) [RHEL-139985]
  - selftests/bpf/benchs: Add overwrite mode benchmark for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add overwrite mode test for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - bpf: Add overwrite mode for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add file dynptr tests (Jerome Marchand) [RHEL-139985]
  - bpf: dispatch to sleepable file dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: refactor kfunc specialization (Jerome Marchand) [RHEL-139985]
  - bpf: add kfuncs and helpers support for file dynptrs (Jerome Marchand) [RHEL-139985]
  - bpf: add plumbing for file-backed dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: centralize const dynptr check in unmark_stack_slots_dynptr() (Jerome Marchand) [RHEL-139985]
  - bpf: widen dynptr size/offset to 64 bit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: remove unnecessary kfunc prototypes (Jerome Marchand) [RHEL-139985]
  - libbpf: fix formatting of bpf_object__append_subprog_code (Jerome Marchand) [RHEL-139985]
  - bpf: make bpf_insn_successors to return a pointer (Jerome Marchand) [RHEL-139985]
  - bpf: generalize and export map_get_next_key for arrays (Jerome Marchand) [RHEL-139985]
  - bpf: save the start of functions in bpf_prog_aux (Jerome Marchand) [RHEL-139985]
  - bpf: fix the return value of push_stack (Jerome Marchand) [RHEL-139985]
  - bpf: Clarify get_outer_instance() handling in propagate_to_outer_instance() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix list_del() in arena list (Jerome Marchand) [RHEL-139985]
  - samples/bpf: Fix spelling typos in samples/bpf (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22 (Jerome Marchand) [RHEL-139985]
  - bpf: mark vma->{vm_mm,vm_file} as __safe_trusted_or_null (Jerome Marchand) [RHEL-139985]
  - bpf: mark mm->owner as __safe_rcu_or_null (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Silence unused-but-set build warnings (Jerome Marchand) [RHEL-139985]
  - bpf: Consistently use bpf_rcu_lock_held() everywhere (Jerome Marchand) [RHEL-139985]
  - bpf: Extract internal structs validation logic into helpers (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add more bpf_wq tests (Jerome Marchand) [RHEL-139985]
  - bpf: Fix handling maps with no BTF and non-constant offsets for the bpf_wq (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - bpf: add bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for async cb context (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor storage_get_func_atomic to generic non_sleepable flag (Jerome Marchand) [RHEL-139985]
  - bpf: Fix sleepable context for async callbacks (Jerome Marchand) [RHEL-139985]
  - bpf: Cleanup unused func args in rqspinlock implementation (Jerome Marchand) [RHEL-139985]
  - bpf: Add dynptr type for skb metadata (Jerome Marchand) [RHEL-139985]
  - cpufreq/amd-pstate: Add comment explaining nominal_perf usage for performance policy (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Add static asserts for EPP indices (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Fix some whitespace issues (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Adjust return values in amd_pstate_update_status() (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Make amd_pstate_get_mode_string() never return NULL (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Drop NULL value from amd_pstate_mode_string (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Use sysfs_match_string() for epp (Steve Best) [RHEL-127643]
  - efi/cper: Fix cper_bits_to_str buffer handling and return value (Thomas Huth) [RHEL-164371]
  - efi: Wipe INITRD config table from memory after consumption (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Fix EDID support in mixed-mode (Thomas Huth) [RHEL-164371]
  - docs: efi: add CPER functions to driver-api (Thomas Huth) [RHEL-164371]
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Thomas Huth) [RHEL-164371]
  - efi/cper: Add a new helper function to print bitmasks (Thomas Huth) [RHEL-164371]
  - efi/cper: Adjust infopfx size to accept an extra space (Thomas Huth) [RHEL-164371]
  - efi/libstub: x86: Store EDID in boot_params (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Add support for reading EDID (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Initialize screen_info in helper function (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Find GOP handle instead of GOP data (Thomas Huth) [RHEL-164371]
  - efi: Fix trailing whitespace in header file (Thomas Huth) [RHEL-164371]
  - efi/memattr: Convert efi_memattr_init() return type to void (Thomas Huth) [RHEL-164371]
  - efi: stmm: fix kernel-doc "bad line" warnings (Thomas Huth) [RHEL-164371]
  - efi/riscv: Remove the useless failure return message print (Thomas Huth) [RHEL-164371]
  - efistub/x86: Add fallback for SMBIOS record lookup (Thomas Huth) [RHEL-164371]
  - kthread: Warn if mm_struct lacks user_ns in kthread_use_mm() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Don't fail check current_in_efi() if preemptible (Thomas Huth) [RHEL-164371]
  - arm64: efi: Fix NULL pointer dereference by initializing user_ns (Thomas Huth) [RHEL-164371]
  - arm64/efi: Call EFI runtime services without disabling preemption (Thomas Huth) [RHEL-164371]
  - arm64/efi: Move uaccess en/disable out of efi_set_pgd() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Drop efi_rt_lock spinlock from EFI arch wrapper (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Permit kernel mode NEON with IRQs off (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Don't warn when EFI execution context is preemptible (Thomas Huth) [RHEL-164371]
  - efi/runtime-wrappers: Keep track of the efi_runtime_lock owner (Thomas Huth) [RHEL-164371]
  - efi: Add missing static initializer for efi_mm::cpus_allowed_lock (Thomas Huth) [RHEL-164371]
  - efi/libstub: Fix page table access in 5-level to 4-level paging transition (Thomas Huth) [RHEL-164371]
  - platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Introduce new interface to export NPU metrics (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Refactor repetitive BIOS output handling (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Remove redundant ternary operators (Steve Best) [RHEL-127641]
  - hwmon: (k10temp) Add AMD Steam Deck APU ID (Steve Best) [RHEL-127650]
  - hwmon: (k10temp) Add device ID for Strix Halo (Steve Best) [RHEL-127650]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-231.el10]
changelog:
  - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-175521]
  - KVM: arm64: Invert KVM_PGTABLE_WALK_HANDLE_FAULT to fix pKVM walkers (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Fix page leak in user_mem_abort() on atomic fault (Sebastian Ott) [RHEL-151899]
  - kselftest/arm64: Add HWCAP test for FEAT_LS64 (Sebastian Ott) [RHEL-151899]
  - arm64: Add support for FEAT_{LS64, LS64_V} (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for FEAT_PMUv3 (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for cpu debug architecture (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest (Sebastian Ott) [RHEL-151899]
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1 (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle DABT caused by LS64* instructions on unsupported memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add documentation for KVM_EXIT_ARM_LDST64B (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add exit to userspace on {LD,ST}64B* outside of memslots (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that reads to inaccessible guest_memfd VMAs SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that faulting in private guest_memfd memory fails (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrapper macro to handle and assert on expected SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Isolate the guest_memfd Copy-on-Write negative testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrappers for mmap() and munmap() to assert success (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add test coverage for guest_memfd without GUEST_MEMFD_FLAG_MMAP (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Create a new guest_memfd for each testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Stash the host page size in a global in the guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Allow mmap() on guest_memfd for x86 VMs with private memory (Sebastian Ott) [RHEL-151899]
  - KVM: Explicitly mark KVM_GUEST_MEMFD as depending on KVM_GENERIC_MMU_NOTIFIER (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Invalidate SHARED GPAs if gmem supports INIT_SHARED (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add INIT_SHARED flag, reject user page faults if not set (Sebastian Ott) [RHEL-151899]
  - KVM: Rework KVM_CAP_GUEST_MEMFD_MMAP into KVM_CAP_GUEST_MEMFD_FLAGS (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Forward FEAT_XNX permissions to the shadow stage-2 (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add guest_memfd testcase to fault-in on !mmap()'d memory (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: guest_memfd mmap() test when mmap is supported (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Do not use hardcoded page sizes in guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: Allow and advertise support for host mmap() on guest_memfd files (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable support for guest_memfd backed memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Handle VNCR_EL2-triggered faults backed by guest_memfd (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle guest_memfd-backed guest page faults (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Refactor user_mem_abort() (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Handle guest page faults for guest_memfd with shared memory (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Extend guest_memfd's max mapping level to shared mappings (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Enforce guest_memfd's max order when recovering hugepages (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Hoist guest_memfd max level/order helpers "up" in mmu.c (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Rename .private_max_mapping_level() to .gmem_max_mapping_level() (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Track guest_memfd mmap support in memslot (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add plumbing to host to map guest_memfd pages (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Enable KVM_GUEST_MEMFD for all 64-bit builds (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comment that refers to kvm uapi header path (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comments that refer to slots_lock (Sebastian Ott) [RHEL-151899]
  - KVM: Rename kvm_slot_can_be_private() to kvm_slot_has_gmem() (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_GENERIC_PRIVATE_MEM to CONFIG_HAVE_KVM_ARCH_GMEM_POPULATE (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select TDX's KVM_GENERIC_xxx dependencies iff CONFIG_KVM_INTEL_TDX=y (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select KVM_GENERIC_PRIVATE_MEM directly from KVM_SW_PROTECTED_VM (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Have all vendor neutral sub-configs depend on KVM_X86, not just KVM (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_PRIVATE_MEM to CONFIG_KVM_GUEST_MEMFD (Sebastian Ott) [RHEL-151899]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-232.el10]
changelog:
  - PCI: Fix alignment calculation for resource size larger than align (Myron Stowe) [RHEL-151449]
  - PCI: Fix premature removal from realloc_head list during resource assignment (Myron Stowe) [RHEL-151449]
  - PCI: Prevent shrinking bridge window from its required size (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: Document PCIe TLP Header decoder for AER messages (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Fix pci_pwrctrl_is_required() device node leak (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Do not power off on pwrctrl device removal (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Create pwrctrl devices only for PCI device nodes (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Ensure that remote endpoint node parent has supply requirement (Myron Stowe) [RHEL-151449]
  - sparc/PCI: Initialize msi_addr_mask for OF-created PCI devices (Myron Stowe) [RHEL-151449]
  - powerpc/pci: Initialize msi_addr_mask for OF-created PCI devices (Myron Stowe) [RHEL-151449]
  - ALSA: hda/intel: Make MSI address limit based on the device DMA limit (Myron Stowe) [RHEL-151449]
  - drm/radeon: Make MSI address limit based on the device DMA limit (Myron Stowe) [RHEL-151449]
  - PCI/MSI: Check the device specific address mask in msi_verify_entries() (Myron Stowe) [RHEL-151449]
  - PCI/MSI: Convert the boolean no_64bit_msi flag to a DMA address mask (Myron Stowe) [RHEL-151449]
  - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: pci-epf-test: Select configfs (Myron Stowe) [RHEL-151449]
  - PCI: Account fully optional bridge windows correctly (Myron Stowe) [RHEL-151449]
  - PCI: Remove useless WARN_ON() from devres (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Add missing struct p2pdma_provider documentation (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: Fix typos in msi-howto.rst (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Add missing NULL check for alloc_workqueue() (Myron Stowe) [RHEL-151449]
  - PCI: Add WQ_PERCPU to alloc_workqueue() users (Myron Stowe) [RHEL-151449]
  - PCI: Disable ACS SV for IDT 0x8090 switch (Myron Stowe) [RHEL-151449]
  - PCI: Disable ACS SV for IDT 0x80b5 switch (Myron Stowe) [RHEL-151449]
  - PCI: Cache ACS Capabilities register (Myron Stowe) [RHEL-151449]
  - PCI: Enable ACS after configuring IOMMU for OF platforms (Myron Stowe) [RHEL-151449]
  - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] (Myron Stowe) [RHEL-151449]
  - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (Myron Stowe) [RHEL-151449]
  - PCI: Use device_lock_assert() to verify device lock is held (Myron Stowe) [RHEL-151449]
  - PCI: Use lockdep_assert_held(pci_bus_sem) to verify lock is held (Myron Stowe) [RHEL-151449]
  - PCI: Fix pci_slot_lock () device locking (Myron Stowe) [RHEL-151449]
  - PCI: Fix pci_slot_trylock() error handling (Myron Stowe) [RHEL-151449]
  - PCI: Mark Nvidia GB10 to avoid bus reset (Myron Stowe) [RHEL-151449]
  - PCI: Mark ASM1164 SATA controller to avoid bus reset (Myron Stowe) [RHEL-151449]
  - Documentation: tracing: Add PCI tracepoint documentation (Myron Stowe) [RHEL-151449]
  - PCI: Move CardBus bridge scanning to setup-cardbus.c (Myron Stowe) [RHEL-151449]
  - PCI: Add pbus_validate_busn() for Bus Number validation (Myron Stowe) [RHEL-151449]
  - PCI: Add dword #defines for Bus Number + Secondary Latency Timer (Myron Stowe) [RHEL-151449]
  - PCI: Use scnprintf() instead of sprintf() (Myron Stowe) [RHEL-151449]
  - PCI: Handle CardBus-specific params in setup-cardbus.c (Myron Stowe) [RHEL-151449]
  - PCI: Separate CardBus setup & build it only with CONFIG_CARDBUS (Myron Stowe) [RHEL-151449]
  - PCI: Add 'pci' prefix to struct pci_dev_resource handling functions (Myron Stowe) [RHEL-151449]
  - PCI: Use resource_assigned() in setup-bus.c algorithm (Myron Stowe) [RHEL-151449]
  - resource: Mark res given to resource_assigned() as const (Myron Stowe) [RHEL-151449]
  - PCI: Add pbus_mem_size_optional() to handle optional sizes (Myron Stowe) [RHEL-151449]
  - PCI: Check invalid align earlier in pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - PCI: Log reset and restore of resources (Myron Stowe) [RHEL-151449]
  - PCI: Add pci_resource_is_bridge_win() (Myron Stowe) [RHEL-151449]
  - PCI: Fetch dev_res to local var in __assign_resources_sorted() (Myron Stowe) [RHEL-151449]
  - PCI: Use res_to_dev_res() in reassign_resources_sorted() (Myron Stowe) [RHEL-151449]
  - PCI: Pass bridge window resource to pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - PCI: Push realloc check into pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - resource: Increase MAX_IORES_LEVEL to 8 (Myron Stowe) [RHEL-151449]
  - PCI: Use resource_set_range() that correctly sets ->end (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Create pwrctrl device if graph port is found (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add PCIe M.2 connector support (Myron Stowe) [RHEL-151449]
  - PCI: Drop the assert_perst() callback (Myron Stowe) [RHEL-151449]
  - PCI: qcom: Drop the assert_perst() callbacks (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Switch to pwrctrl create, power on/off, destroy APIs (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add APIs to power on/off pwrctrl devices (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add APIs to create, destroy pwrctrl devices (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add 'struct pci_pwrctrl::power_{on/off}' callbacks (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: pwrseq: Factor out power on/off code to helpers (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: slot: Factor out power on/off code to helpers (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: slot: Rename private struct and pointers for consistency (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: pwrseq: Rename private struct and pointers for consistency (Myron Stowe) [RHEL-151449]
  - PCI/PTM: Fix pcie_ptm_create_debugfs() memory leak (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Use bus-type functions (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Don't check for valid device and driver in bus callbacks (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Move pcie_port_bus_type to pcie source file (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Don't check for the driver's and device's bus (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Drop empty shutdown callback (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Fix potential resource leak (Myron Stowe) [RHEL-151449]
  - PCI/PM: Prevent runtime suspend until devices are fully initialized (Myron Stowe) [RHEL-151449]
  - PCI/PM: Avoid redundant delays on D3hot->D3cold (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Reset page reference count when page mapping fails (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails (Myron Stowe) [RHEL-151449]
  - PCI/PME: Replace RMW of Root Status register with direct write (Myron Stowe) [RHEL-151449]
  - PCI/ACPI: Restrict program_hpx_type2() to AER bits (Myron Stowe) [RHEL-151449]
  - PCI: Initialize RCB from pci_configure_device() (Myron Stowe) [RHEL-151449]
  - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() (Myron Stowe) [RHEL-151449]
  - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken (Myron Stowe) [RHEL-151449]
  - PCI: Do not attempt to set ExtTag for VFs (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Avoid creating sub-groups asynchronously (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors (Myron Stowe) [RHEL-151449]
  - PCI/bwctrl: Disable BW controller on Intel P45 using a quirk (Myron Stowe) [RHEL-151449]
  - PCI: trace: Add RAS tracepoint to monitor link speed changes (Myron Stowe) [RHEL-151449]
  - PCI: trace: Add generic RAS tracepoint for hotplug event (Myron Stowe) [RHEL-151449]
  - PCI/AER: Clear stale errors on reporting agents upon probe (Myron Stowe) [RHEL-151449]
  - resource: Introduce resource_assigned() for discerning active resources (Myron Stowe) [RHEL-151449]
  - PCI: Test for bit underflow in pcie_set_readrq() (Myron Stowe) [RHEL-151449]
  - docs: powerpc: add htm.rst to toctree (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Enable third attention indicator state (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Fix surprise plug detection and recovery (Myron Stowe) [RHEL-151449]
  - powerpc/eeh: Export eeh_unfreeze_pe() (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Work around switches with broken presence detection (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Clean up allocated IRQs on unplug (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variant of DEFINE_RES() (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variants of DEFINE_RES_*_NAMED() (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variant of DEFINE_RES_NAMED_DESC() (Myron Stowe) [RHEL-151449]
  - resource: split DEFINE_RES_NAMED_DESC() out of DEFINE_RES_NAMED() (Myron Stowe) [RHEL-151449]
  - xfs: fix remote xattr valuelblk check (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: fix the xattr scrub to detect freemap/entries array collisions (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: strengthen attr leaf block freemap checking (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: refactor attr3 leaf table size computation (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171476] {CVE-2026-31613}
  - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-167108] {CVE-2025-40237}
  - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-167108]
  - scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-153020]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-233.el10]
changelog:
  - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-130557]
  - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163346] {CVE-2025-38653}
  - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163346] {CVE-2025-38653}
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163346] {CVE-2025-38653}
  - rxrpc: Fix recvmsg() unconditional requeue (CKI Backport Bot) [RHEL-147235] {CVE-2026-23066}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-234.el10]
changelog:
  - s390/tape: Add support for bigger block sizes (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Introduce idal buffer array (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Move idal allocation to core functions (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Fix return value of ccw helper functions (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Remove extra CCW allocation for error recovery (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Remove 3590 Read Opposite error recovery (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Remove 34xx Read Opposite error recovery (Ramesh Chhetri) [RHEL-136091]
  - s390/tape: Remove count parameter from read/write_block functions (Ramesh Chhetri) [RHEL-136091]
  - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-178183]
  - scsi: smartpqi: Silence a recursive lock warning (Tomas Henzl) [RHEL-169577]
  - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-173193]
  - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-173193]
  - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-173188]
  - dpll: add pin operational state (Ivan Vecera) [RHEL-173188]
  - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172829]
  - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172829]
  - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172829]
  - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172829]
  - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172829] {CVE-2026-31709}
  - panic: introduce helper functions for panic state (Jocelyn Falempe) [RHEL-135265]
  - redhat/configs: add CONFIG_LOGO_LINUX_CLUT224_FILE (Jocelyn Falempe) [RHEL-135265]
  - redhat/configs: add CONFIG_HYPERV_VMBUS (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Fix build on MIPS64 (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Replace license boilerplate by SPDX header (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Fold au1100fb.h into its only user (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Replace custom printk wrappers by pr_* (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Make driver compilable on non-mips platforms (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Use proper conversion specifiers in printk formats (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Mark several local functions as static (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Don't store device specific data in global variables (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Remove struct fbcon_display.inverse (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: ffb: fix corrupted video output on Sun FFB1 (Jocelyn Falempe) [RHEL-135265]
  - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: au1100fb: Check return value of clk_enable() in .resume() (Jocelyn Falempe) [RHEL-135265]
  - printk, vt, fbcon: Remove console_conditional_schedule() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: fix fb_pad_unaligned_buffer mask (Jocelyn Falempe) [RHEL-135265]
  - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent() (Jocelyn Falempe) [RHEL-135265]
  - video/logo: don't select LOGO_LINUX_MONO and LOGO_LINUX_VGA16 by default (Jocelyn Falempe) [RHEL-135265]
  - video/logo: move logo selection logic to Kconfig (Jocelyn Falempe) [RHEL-135265]
  - video/logo: remove logo_mac_clut224 (Jocelyn Falempe) [RHEL-135265]
  - newport_con: depend on LOGO_LINUX_CLUT224 instead of LOGO_SGI_CLUT224 (Jocelyn Falempe) [RHEL-135265]
  - video/logo: allow custom logo (Jocelyn Falempe) [RHEL-135265]
  - video/logo: add a type parameter to the logo makefile function (Jocelyn Falempe) [RHEL-135265]
  - video/logo: remove orphan .pgm Makefile rule (Jocelyn Falempe) [RHEL-135265]
  - fbdev: omapfb: remove duplicate check in omapfb_setup_mem() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: sh_mobile_lcdc: Make FB_DEVICE dependency optional (Jocelyn Falempe) [RHEL-135265]
  - fbdev: omapfb: Make FB_DEVICE dependency optional (Jocelyn Falempe) [RHEL-135265]
  - fbcon: check return value of con2fb_acquire_newinfo() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: hyperv_fb: Remove hyperv_fb driver (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Use device_create_with_groups() to fix sysfs groups registration race (Jocelyn Falempe) [RHEL-135265]
  - fbdev: smscufx: properly copy ioctl memory to kernelspace (Jocelyn Falempe) [RHEL-135265]
  - fbdev: rivafb: fix divide error in nv3_arb() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: i810: use appopriate log interface dev_info (Jocelyn Falempe) [RHEL-135265]
  - fbdev: tridentfb: replace printk() with dev_*() in probe (Jocelyn Falempe) [RHEL-135265]
  - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing (Jocelyn Falempe) [RHEL-135265]
  - fbdev: tcx.c fix mem_map to correct smem_start offset (Jocelyn Falempe) [RHEL-135265]
  - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (Jocelyn Falempe) [RHEL-135265]
  - fbdev: gxt4500fb: Use dev_err instead of printk (Jocelyn Falempe) [RHEL-135265]
  - fbdev: gbefb: fix to use physical address instead of dma address (Jocelyn Falempe) [RHEL-135265]
  - fbdev: vesafb: Use dev_* fn's instead printk (Jocelyn Falempe) [RHEL-135265]
  - fbdev: vga16fb: Request memory region (Jocelyn Falempe) [RHEL-135265]
  - fbdev: vga16fb: replace printk() with dev_*() in probe (Jocelyn Falempe) [RHEL-135265]
  - fbdev: atyfb: Check if pll_ops->init_pll failed (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-135265]
  - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS (Jocelyn Falempe) [RHEL-135265]
  - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Fix logic error in "offb" name match (Jocelyn Falempe) [RHEL-135265]
  - fbdev/hyperv_fb: deprecate this in favor of Hyper-V DRM driver (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Make drivers depend on LCD_CLASS_DEVICE (Jocelyn Falempe) [RHEL-135265]
  - fbdev: radeonfb: Remove stale product link in Kconfig (Jocelyn Falempe) [RHEL-135265]
  - Drivers: hv: Add CONFIG_HYPERV_VMBUS option (Jocelyn Falempe) [RHEL-135265]
  - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() (Jocelyn Falempe) [RHEL-135265]
  - fbdev: s3fb: Revert mclk stop in suspend (Jocelyn Falempe) [RHEL-135265]
  - fbdev: mb862xxfb: Use int type to store negative error codes (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Use string choices helpers (Jocelyn Falempe) [RHEL-135265]
  - fbdev: core: Fix ubsan warning in pixel_to_pat (Jocelyn Falempe) [RHEL-135265]
  - fbdev: s3fb: Implement 1 and 2 BPP modes, improve 4 BPP (Jocelyn Falempe) [RHEL-135265]
  - fbdev: s3fb: Implement powersave for S3 FB (Jocelyn Falempe) [RHEL-135265]
  - fbdev: xenfb: Use vmalloc_array to simplify code (Jocelyn Falempe) [RHEL-135265]
  - fbdev/simplefb: Sort headers correctly (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Turn FB_MODE_HELPERS into an internal config option (Jocelyn Falempe) [RHEL-135265]
  - fbdev: Make drivers depend on FB_TILEBLITTING (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Streamline setting rotated/unrotated bitops (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Move fbcon callbacks into struct fbcon_bitops (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Set rotate_font callback with related callbacks (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Rename struct fbcon_ops to struct fbcon_par (Jocelyn Falempe) [RHEL-135265]
  - fbcon: Fix empty lines in fbcon.h (Jocelyn Falempe) [RHEL-135265]
  - fbdev: use panic_in_progress() helper (Jocelyn Falempe) [RHEL-135265]
  - drm/vesadrm: Support DRM_FORMAT_C8 (Jocelyn Falempe) [RHEL-135265]
  - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172557] {CVE-2026-43006}
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156428]
  - software node: Also support referencing non-constant software nodes (Mark Langsdorf) [RHEL-156428]
  - platform/x86: intel: chtwc_int33fe: don't dereference swnode args (Mark Langsdorf) [RHEL-156428]
  - usb: hcd: queue wakeup_work to system_freezable_wq workqueue (Mark Langsdorf) [RHEL-156428]
  - device property: Allow secondary lookup in fwnode_get_next_child_node() (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: wakeirq: Update outdated documentation comments (Mark Langsdorf) [RHEL-156428]
  - driver core: remove device_change_owner() export (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races (Mark Langsdorf) [RHEL-156428]
  - PM: wakeup: Handle empty list in wakeup_sources_walk_start() (Mark Langsdorf) [RHEL-156428]
  - regcache: Demote defaults readback from HW to debug print (Mark Langsdorf) [RHEL-156428]
  - driver-core: move devres_for_each_res() to base.h (Mark Langsdorf) [RHEL-156428]
  - driver core: faux: stop using static struct device (Mark Langsdorf) [RHEL-156428]
  - driver core: make pinctrl_bind_pins() private (Mark Langsdorf) [RHEL-156428]
  - driver core: attribute_container: change return type to void (Mark Langsdorf) [RHEL-156428]
  - devtmpfs: Replace simple_strtoul with kstrtoint in mount_param (Mark Langsdorf) [RHEL-156428]
  - devtmpfs: make 'devtmpfs_context_ops' static (Mark Langsdorf) [RHEL-156428]
  - regmap: Enable REGMAP when REGMAP_SLIMBUS is enabled (Mark Langsdorf) [RHEL-156428]
  - regmap: Fix race condition in hwspinlock irqsave routine (Mark Langsdorf) [RHEL-156428]
  - driver core: make bus_find_device_by_acpi_dev() stub prototype aligned (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: Do not flag runtime PM workqueue as freezable (Mark Langsdorf) [RHEL-156428]
  - PM: WQ_UNBOUND added to pm_wq workqueue (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Stop checking pm_runtime_barrier() return code (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Make pm_runtime_barrier() return void (Mark Langsdorf) [RHEL-156428]
  - regmap: i3c: switch to use i3c_xfer from i3c_priv_xfer (Mark Langsdorf) [RHEL-156428]
  - driver core: Check drivers_autoprobe for all added devices (Mark Langsdorf) [RHEL-156428]
  - driver core: WQ_PERCPU added to alloc_workqueue users (Mark Langsdorf) [RHEL-156428]
  - driver core: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156428]
  - tick/nohz: avoid showing '(null)' if nohz_full= not set (Mark Langsdorf) [RHEL-156428]
  - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER (Mark Langsdorf) [RHEL-156428]
  - software node: allow referencing firmware nodes (Mark Langsdorf) [RHEL-156428]
  - software node: increase the reference of the swnode by its fwnode (Mark Langsdorf) [RHEL-156428]
  - software node: read the reference args via the fwnode API (Mark Langsdorf) [RHEL-156428]
  - devres: Move devm_alloc_percpu() and related to devres.h (Mark Langsdorf) [RHEL-156428]
  - devres: Remove unused devm_free_percpu() (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: core: Fix runtime PM enabling in device_resume_early() (Mark Langsdorf) [RHEL-156428]
  - PM: Introduce new PMSG_POWEROFF event (Mark Langsdorf) [RHEL-156428]
  - PM: wakeup: Update after recent wakeup source removal ordering change (Mark Langsdorf) [RHEL-156428]
  - PM: wakeup: Delete timer before removing wakeup source from list (Mark Langsdorf) [RHEL-156428]
  - regmap: i3c: Use ARRAY_SIZE() (Mark Langsdorf) [RHEL-156428]
  - regcache: flat: Remove unneeded check and error message for -ENOMEM (Mark Langsdorf) [RHEL-156428]
  - regcache: rbtree: Split ->populate() from ->init() (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: fix typos in runtime.c comments (Mark Langsdorf) [RHEL-156428]
  - regmap: warn users about uninitialized flat cache (Mark Langsdorf) [RHEL-156428]
  - regmap: add flat cache with sparse validity (Mark Langsdorf) [RHEL-156428]
  - platform: Add firmware-agnostic irq and affinity retrieval interface (Mark Langsdorf) [RHEL-156428]
  - of/irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156428]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156428]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: docs: Update pm_runtime_allow/forbid() documentation (Mark Langsdorf) [RHEL-156428]
  - arch_topology: move parse_acpi_topology() to common code (Mark Langsdorf) [RHEL-156428]
  - firmware_loader: Replace simple_strtol() with kstrtoint() (Mark Langsdorf) [RHEL-156428]
  - firmware_loader: Only call cancel when upload is active (Mark Langsdorf) [RHEL-156428]
  - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (Mark Langsdorf) [RHEL-156428]
  - PM: dpm_watchdog: add module param to backtrace all CPUs (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: Introduce CALL_PM_OP() macro to simplify code (Mark Langsdorf) [RHEL-156428]
  - devcoredump: Fix circular locking dependency with devcd->mutex. (Mark Langsdorf) [RHEL-156428]
  - driver core: fw_devlink: Don't warn about sync_state() pending (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: Replace snprintf() with scnprintf() in show_trace_dev_match() (Mark Langsdorf) [RHEL-156428]
  - drivers/base/memory: add node id parameter to add_memory_block() (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Fix error checking for kunit_device_register() (Mark Langsdorf) [RHEL-156428]
  - drivers/base/node: fix double free in register_one_node() (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: Do not wait on SYNC_STATE_ONLY device links (Mark Langsdorf) [RHEL-156428]
  - redhat/configs: enable power runtime unit tests (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Add basic kunit tests for API contracts (Mark Langsdorf) [RHEL-156428]
  - PM: runtime: Make put{,_sync}() return 1 when already suspended (Mark Langsdorf) [RHEL-156428]
  - drivers/base/node: handle error properly in register_one_node() (Mark Langsdorf) [RHEL-156428]
  - devres: provide devm_kmemdup_const() (Mark Langsdorf) [RHEL-156428]
  - driver core: auxiliary bus: Optimize logic of auxiliary_match_id() (Mark Langsdorf) [RHEL-156428]
  - driver core: auxiliary bus: Drop dev_pm_domain_detach() call (Mark Langsdorf) [RHEL-156428]
  - driver core: Fix order of the kernel-doc parameters (Mark Langsdorf) [RHEL-156428]
  - driver core: get_dev_from_fwnode(): document potential race (Mark Langsdorf) [RHEL-156428]
  - drivers: base: fix "publically"->"publicly" (Mark Langsdorf) [RHEL-156428]
  - PM: core: Add two macros for walking device links (Mark Langsdorf) [RHEL-156428]
  - PM: core: Annotate loops walking device links as _srcu (Mark Langsdorf) [RHEL-156428]
  - driver core/PM: Set power.no_callbacks along with power.no_pm (Mark Langsdorf) [RHEL-156428]
  - driver core: faux: Set power.no_pm for faux devices (Mark Langsdorf) [RHEL-156428]
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path (Mark Langsdorf) [RHEL-156428]
  - regmap: use int type to store negative error codes (Mark Langsdorf) [RHEL-156428]
  - software node: Constify node_group in registration functions (Mark Langsdorf) [RHEL-156428]
  - regmap: Remove superfluous check for !config in __regmap_init() (Mark Langsdorf) [RHEL-156428]
  - regmap: mmio: Add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-156428]
  - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() (Waiman Long) [RHEL-154147]
  - panic: only warn about deprecated panic_print on write access (Waiman Long) [RHEL-154147]
  - docs: panic: correct some sys_ifo names in sysctl doc (Waiman Long) [RHEL-154147]
  - panic: remove CONFIG_PANIC_ON_OOPS_VALUE (Waiman Long) [RHEL-154147]
  - panic: remove redundant panic-cpu backtrace (Waiman Long) [RHEL-154147]
  - watchdog: skip checks when panic is in progress (Waiman Long) [RHEL-154147]
  - panic: use panic_try_start() in vpanic() (Waiman Long) [RHEL-154147]
  - panic: use panic_try_start() in nmi_panic() (Waiman Long) [RHEL-154147]
  - panic: introduce helper functions for panic state (Waiman Long) [RHEL-154147]
  - panic: clean up message about deprecated 'panic_print' parameter (Waiman Long) [RHEL-154147]
  - panic: add note that 'panic_print' parameter is deprecated (Waiman Long) [RHEL-154147]
  - watchdog/softlockup: fix incorrect CPU utilization output during softlockup (Waiman Long) [RHEL-154147]
  - watchdog/softlockup: fix wrong output when watchdog_thresh < 3 (Waiman Long) [RHEL-154147]
  - panic: add note that panic_print sysctl interface is deprecated (Waiman Long) [RHEL-154147]
  - panic: add 'panic_sys_info=' setup option for kernel cmdline (Waiman Long) [RHEL-154147]
  - panic: add 'panic_sys_info' sysctl to take human readable string parameter (Waiman Long) [RHEL-154147]
  - panic: generalize panic_print's function to show sys info (Waiman Long) [RHEL-154147]
  - panic: clean up code for console replay (Waiman Long) [RHEL-154147]
  - watchdog: fix opencoded cpumask_next_wrap() in watchdog_next_cpu() (Waiman Long) [RHEL-154147]
  - sysctl: Move sysctl_panic_on_stackoverflow to kernel/panic.c (Waiman Long) [RHEL-154147]
  - sysctl: Move tainted ctl_table into kernel/panic.c (Waiman Long) [RHEL-154147]
  - watchdog/perf: Provide function for adjusting the event period (Waiman Long) [RHEL-154147]
  - kernel/watchdog: add /sys/kernel/{hard,soft}lockup_count (Waiman Long) [RHEL-154147]
  - watchdog: fix watchdog may detect false positive of softlockup (Waiman Long) [RHEL-154147]
  - panic: Move panic ctl tables into panic.c (Waiman Long) [RHEL-154147]
  - x86/nmi: Consolidate NMI panic variables (Waiman Long) [RHEL-154147]
  - x86/nmi: Simplify unknown NMI panic handling (Waiman Long) [RHEL-154147]
  - watchdog/perf: optimize bytes copied and remove manual NUL-termination (Waiman Long) [RHEL-154147]
  - x86: Move sysctls into arch/x86 (Waiman Long) [RHEL-154147]
  - watchdog/hardlockup/perf: Warn if watchdog_ev is leaked (Waiman Long) [RHEL-154147]
  - watchdog/hardlockup/perf: Fix perf_event memory leak (Waiman Long) [RHEL-154147]
  - treewide: const qualify ctl_tables where applicable (Waiman Long) [RHEL-154147]
  - watchdog: output this_cpu when printing hard LOCKUP (Waiman Long) [RHEL-154147]
  - lib/Makefile: make union-find compilation conditional on CONFIG_CPUSETS (Waiman Long) [RHEL-154147]
  - kernel/watchdog: always restore watchdog_softlockup(,hardlockup)_user_enabled after proc show (Waiman Long) [RHEL-154147]
  - entry: Split generic entry into generic exception and syscall entry (Steve Dunnagan) [RHEL-150903]
  - entry: Inline syscall_exit_to_user_mode() (Steve Dunnagan) [RHEL-150903]
  - tools/bootconfig: specify LDFLAGS as an argument to CC (Brian Masney) [RHEL-73522]
  - tools/bootconfig: allow overriding CFLAGS assignment (Brian Masney) [RHEL-73522]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-235.el10]
changelog:
  - redhat: Add DENYLIST.rhel to BPF selftests (Viktor Malik) [RHEL-76113]
  - xfs: flush delalloc blocks on ENOSPC in xfs_trans_alloc_icreate (Ravi Singh) [RHEL-116652]
  - host1x: Make remove callback return void (Karol Herbst) [RHEL-176018]
  - overflow: Add STACK_FLEX_ARRAY_SIZE() helper (Karol Herbst) [RHEL-176018]
  - stddef: Remove token-pasting in TRAILING_OVERLAP() (Karol Herbst) [RHEL-176018]
  - stddef: Introduce TRAILING_OVERLAP() helper macro (Karol Herbst) [RHEL-176018]
  - kernel: include linux/util_macros.h (Karol Herbst) [RHEL-176018]
  - util_macros.h: make the header more resilient (Karol Herbst) [RHEL-176018]
  - s390/qeth: Handle ambiguous OSA RCs in s390dbf (Ramesh Chhetri) [RHEL-136140]
  - s390/qeth: Move all OSA RCs to single enum (Ramesh Chhetri) [RHEL-136140]
  - s390/ctcm: Fix double-kfree (Ramesh Chhetri) [RHEL-136140]
  - s390/ctcm: Use info level for handshake UC_RCRESET (Ramesh Chhetri) [RHEL-136140]
  - s390/iucv: Convert sprintf/snprintf to scnprintf (Ramesh Chhetri) [RHEL-136140]
  - x86/fpu: Remove export of mxcsr_feature_mask (Krzysztof Pawlinski) [RHEL-115162]
  - x86/pkeys: Simplify PKRU update in signal frame (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu: Clarify the "xa" symbolic name used in the XSTATE* macros (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu: Use XSAVE{,OPT,C,S} and XRSTOR{,S} mnemonics in xstate.h (Krzysztof Pawlinski) [RHEL-115162]
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE (Krzysztof Pawlinski) [RHEL-115162]
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu: Log XSAVE disablement consistently (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/apx: Add APX test (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/avx: Add AVX tests (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/apx: Enable APX state support (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/apx: Disallow conflicting MPX presence (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/apx: Define APX state component (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Adjust xstate copying logic for user ABI (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Adjust XSAVE buffer size calculation (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Introduce xfeature order table and accessor macro (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Remove xstate offset check (Krzysztof Pawlinski) [RHEL-115162]
  - x86/fpu/xstate: Simplify print_xstate_features() (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Fix spelling mistake "hader" -> "header" (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Clarify supported xstates (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Consolidate test invocations into a single entry (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Introduce signal ABI test (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Refactor ptrace ABI test (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Refactor context switching test (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Enumerate and name xstate components (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86/xstate: Refactor XSAVE helpers for general use (Krzysztof Pawlinski) [RHEL-115162]
  - selftests/x86: Consolidate redundant signal helper functions (Krzysztof Pawlinski) [RHEL-115162]
  - iommu/amd: Mark AMD IOMMUfd as Tech Preview (Jerry Snitselaar) [RHEL-168270]
  - ipmi:ssif: Clean up kthread on errors (Tony Camuso) [RHEL-169911]
  - ipmi:ssif: Remove unnecessary indention (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: Fix KUnit test link failure when KUNIT=m (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: add unit test for state machine (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: change log level to dbg in irq callback (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: fix message desynchronization after truncated response (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure (Tony Camuso) [RHEL-169911]
  - ipmi: ssif_bmc: cancel response timer on remove (Tony Camuso) [RHEL-169911]
  - ipmi: Replace use of system_wq with system_percpu_wq (Tony Camuso) [RHEL-169911]
  - ipmi:si: Fix check for a misbehaving BMC (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Handle error returns from the SMI sender (Tony Camuso) [RHEL-169911]
  - ipmi:si: Don't block module unload if the BMC is messed up (Tony Camuso) [RHEL-169911]
  - ipmi:si: Use a long timeout when the BMC is misbehaving (Tony Camuso) [RHEL-169911]
  - ipmi:si: Handle waiting messages when BMC failure detected (Tony Camuso) [RHEL-169911]
  - ipmi:ls2k: Make ipmi_ls2k_platform_driver static (Tony Camuso) [RHEL-169911]
  - ipmi: ipmb: initialise event handler read bytes (Tony Camuso) [RHEL-169911]
  - ipmi: Consolidate the run to completion checking for xmit msgs lock (Tony Camuso) [RHEL-169911]
  - ipmi: Fix use-after-free and list corruption on sender error (Tony Camuso) [RHEL-169911]
  - ipmi: Switch to use %ptSp (Tony Camuso) [RHEL-169911]
  - ipmi: Skip channel scan if channels are already marked ready (Tony Camuso) [RHEL-169911]
  - ipmi: Fix __scan_channels() failing to rescan channels (Tony Camuso) [RHEL-169911]
  - ipmi: Fix the race between __scan_channels() and deliver_response() (Tony Camuso) [RHEL-169911]
  - ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-169911]
  - ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-169911]
  - ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-169911]
  - ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-169911]
  - ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-169911]
  - ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-169911]
  - ipmi:si: Merge some if statements (Tony Camuso) [RHEL-169911]
  - ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-169911]
  - ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-169911]
  - ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-169911]
  - ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-169911]
  - ipmi: Rework user message limit handling (Tony Camuso) [RHEL-169911]
  - Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-169911]
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-169911]
  - char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-169911]
  - ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-169911]
  - ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-169911]
  - ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-169911]
  - ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-169911]
  - ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-169911]
  - ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-169911]
  - ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-169911]
  - ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-169911]
  - ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-169911]
  - mpls: add seqcount to protect the platform_label{,s} pair (Antoine Tenart) [RHEL-161561]
  - rtnetlink: fix leak of SRCU struct in rtnl_link_register (Antoine Tenart) [RHEL-161561]
  - selftests: rtnetlink: add neighbour update test (Antoine Tenart) [RHEL-161561]
  - neighbour: restore protocol != 0 check in pneigh update (Antoine Tenart) [RHEL-161561]
  - ALSA: update RHEL kconfigs for 7.0 upstream code (Jaroslav Kysela) [RHEL-168082]
  - ASoC: pxa2xx-ac97: fix error handling for reset GPIO descriptor (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: NVL-S: add platform name (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: NVL: add platform name (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix the warning 'rae_fw' from request_firmware() not released (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: do not use 'acquire' PM API (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/tas2781: Fix sound abnormal issue on some SPI device (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett 18i20 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Evaluate packsize caps at the right place (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Correct kernel doc for sdca_irq_cleanup() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: update DMI quirk and add ACP DMIC for Lenovo platforms (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Unregister IRQ handlers on module remove (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: mask Function_Status value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Fix overwritten var within for loop (Jaroslav Kysela) [RHEL-168082]
  - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: modify period size constraints for ACE4 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/intel: enforce stricter period-size alignment for Intel NVL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8325: Add software reset during probe (Jaroslav Kysela) [RHEL-168082]
  - Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone" (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: avs: Fix memory leak in avs_register_i2s_test_boards() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: fix iteration in is_endpoint_present() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: Fix endpoint index if endpoints are missing (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Fix errors in IRQ cleanup (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: add Lenovo P16s G5 AMD quirk for legacy SDW machine (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: ti,tas2552: Add sound-dai-cells (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: audioreach: explicitly enable speaker protection modules (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: ps: Fix missing leading zeros in subsystem_device SSID log (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for Acer Swift SFG14-73 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: boards: fix unmet dependency on PINCTRL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: ehl_rt5660: Use the correct rtd->dev device in hw_params (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Slim 7 14AKP10 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for HP Laptop 15-fc0xxx (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 16X OLED M7601RM (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: caiaq: fix stack out-of-bounds read in init_card (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ctxfi: Check the error for index mapping (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/intel: Add MSI X870E Tomahawk to denylist by DMI ID (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for Framework F111:000F (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx (Jaroslav Kysela) [RHEL-168082]
  - Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist" (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB17X USB Audio (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add HP Laptop 15-fd0xxx mute LED quirk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek - Fixed Speaker Mute LED for HP EliteBoard G1a platform (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload (Jaroslav Kysela) [RHEL-168082]
  - ASoC: adau1372: Fix clock leak on PLL lock failure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: fix finding wrong entity (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: remove the max count of initialization table (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: wcd934x: fix typo in dt parsing (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: stm32: Fix incorrect compatible string in stm32h7-sai match (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Fix the device initialization (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: add ASUS HN7306EA quirk for legacy SDW machine (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: topology: reject invalid vendor array size in token parser (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2781: Add null check for calibration data (Jaroslav Kysela) [RHEL-168082]
  - ALSA: asihpi: avoid write overflow check warning (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl: imx-card: initialize playback_only and capture_only (Jaroslav Kysela) [RHEL-168082]
  - ASoC: simple-card-utils: Check value of is_playback_only and is_capture_only (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: qcom: Fix the license marking (Jaroslav Kysela) [RHEL-168082]
  - ALSA:usb:qcom: add AUXILIARY_BUS to Kconfig dependencies (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: rockchip: Add compatible for RK3576 SPDIF (Jaroslav Kysela) [RHEL-168082]
  - ALSA: firewire-lib: fix uninitialized local variable (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: add PX13 SoundWire machine link for rt721+tas2783x2 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: add DMI override for ACP70 flag (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sma1307: fix double free of devm_kzalloc() memory (Jaroslav Kysela) [RHEL-168082] {CVE-2026-31475}
  - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for Lenovo Yoga 7 2-in-1 16AKP10 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp-mach-common: Add missing error check for clock acquisition (Jaroslav Kysela) [RHEL-168082]
  - ASoC: detect empty DMI strings (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH USB Audio (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces (Jaroslav Kysela) [RHEL-168082]
  - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-core: flush delayed work before removing DAIs and widgets (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-core: drop delayed_work_pending() check before flush (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tegra: Add support for Tegra238 soundcard (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for ASUS UM6702RC (Jaroslav Kysela) [RHEL-168082]
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: Fix fragmentation regression in firmware download (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start (Jaroslav Kysela) [RHEL-168082]
  - ALSA: us122l: drop redundant interface references (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: renesas,rz-ssi: Document RZ/G3L SoC (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Add allocation failure check for Entity name (Jaroslav Kysela) [RHEL-168082] {CVE-2026-23301}
  - ALSA: hda/senary: Ensure EAPD is enabled during init (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/senary: Use codec->core.afg for GPIO access (Jaroslav Kysela) [RHEL-168082]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: tegra: Add compatible for Tegra238 sound card (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/hdmi: Add Tegra238 HDA codec device ID (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: Suppress pointless warning about number of GPIO pulls (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCD SKU (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1321: fix DMIC ch2/3 mask issue (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: Only patch ASP registers if the DAI is part of a DAIlink (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: firewire: dice: Fix printf warning with W=1 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/tas2781: A workaround solution to lower-vol issue among lower calibrated-impedance micro-speaker on TAS2781 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for HP Pavilion 15-eh1xxx to enable mute LED (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/ca0132: Set HP/Speaker auto-detect default from headphone pin verb (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Fix comments for sdca_irq_request() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: us144mkii: Drop kernel-doc markers (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Drop superfluous kernel-doc markers (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb: qcom: Correct parameter comment for uaudio_transfer_buffer_setup() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: cs35l56: Remove unnecessary struct cs_dsp_client_ops (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Use correct version for UAC3 header validation (Jaroslav Kysela) [RHEL-168082] {CVE-2026-23318}
  - ALSA: hda/realtek: add quirk for Acer Nitro ANV15-51 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/intel: increase default bdl_pos_adj for Nvidia controllers (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Use inclusive terms (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Cap the packet size pre-calculations (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs42l43: Report insert for exotic peripherals (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Skip clock selector for Focusrite devices (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add QUIRK_FLAG_SKIP_IFACE_SETUP (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Improve Focusrite sample rate filtering (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add quirk for Samsung Galaxy Book Flex (NT950QCT-A38A) (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: fix model name typo for Samsung Galaxy Book Flex (NT950QCG-X716) (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Acer Aspire V3-572G (Jaroslav Kysela) [RHEL-168082]
  - ALSA: scarlett2: Fix DSP filter control array handling (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: amd_sdw: add machine driver quirk for Lenovo models (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Add ACP7.0 match entries for Realtek parts (Jaroslav Kysela) [RHEL-168082]
  - ALSA: echoaudio: Add SPDX ids to some files (Jaroslav Kysela) [RHEL-168082]
  - ALSA: isa: Add SPDX id lines to some files (Jaroslav Kysela) [RHEL-168082]
  - ALSA: core: Add SPDX license id to files (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: add explicit port prepare handling (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Fix playback and capture (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3405MA (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: sm8250: Add quinary MI2S support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Avoid potentially repeated XRUN error messages (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Update the number of packets properly at receiving (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: asahi-kasei,ak5558: Reference common DAI properties (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for GHW-123P (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt721-sdca: Fix issue of fail to detect OMTP jack type (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add DSD support for iBasso DC04U (Jaroslav Kysela) [RHEL-168082]
  - ALSA: mixer: oss: Add card disconnect checkpoints (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-control: Set correct error code in refresh_bytes_control (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: select CONFIG_SND_HDA_EXT_CORE from SND_SOC_SOF_HDA_COMMON (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ctxfi: Add quirk for SE-300PCIE variant (160b:0102) (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/generic: fix typos in comments (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_asrc_dma: allocate memory from dma device (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_asrc: Add support for i.MX952 platform (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_asrc_m2m: Add option to start ASRC before DMA device for M2M (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: fsl,imx-asrc: Add support for i.MX952 platform (Jaroslav Kysela) [RHEL-168082]
  - ALSA: oss: delete self assignment (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Convert to FIELD_PREP (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Fill IEC958 CS info per params (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Add support for format S32_LE (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Add support for set mclk rate (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Swap PCM and DAI component registration order (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Improve sample rate support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Use dev_err_probe (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Fully convert to device managed resources (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Move DT compatible table (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: spdif: Use device_get_match_data() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: KUnit tests for parsing and using onchip GPIOs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56-shared: KUnit tests for onchip speaker ID gpios (Jaroslav Kysela) [RHEL-168082]
  - ASoC: cs35l56: Support for reading speaker ID from on-chip GPIOs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ti: davinci-mcasp: Add asynchronous mode support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ti: davinci-mcasp: Streamline pdir behavior across rx & tx streams (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ti: davinci-mcasp: Disambiguate mcasp_is_synchronous function (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: davinci-mcasp: Add properties for asynchronous mode (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Limit values user can write to Selected Mode (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Add regmap defaults for specification defined values (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Rearrange FDL file messages (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Still process most of the jack detect if control is missing (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Handle volatile controls correctly (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Remove outdated todo comment (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2781: Put three different calibrated data solution into the same data structure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: fsl_rpmsg: Add compatible string for i.MX952 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: fsl_rpmsg: Add compatible string for i.MX94 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: Add a virtual CPU DAI (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: Fix NULL pointer dereference (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: sof-audio: Add support for loopback capture (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: sof-audio: Traverse paths with aggregated DAI widgets (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Add support for process modules with no input pins (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Add new tokens for pipeline direction (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: sof_sdw: Add a DAI link for loopback capture (Jaroslav Kysela) [RHEL-168082]
  - uapi: sound: sof: tokens: Add missing token for KCPS (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: pcm: Split up widget prepare and setup (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: sof-audio: Add a new op in struct sof_ipc_tplg_ops (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: Add quirk for Minisforum V3 SE (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: add SDCA property check (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: allow module parameter override BT link to 0 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: soc-acpi-intel-ptl-match: drop rt721 related match tables (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda-sdw-bpt: support simultaneous audio and BPT streams (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: add hda_dma_prepare/cleanup helpers (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: add hda_dsp_stream_pair_get/put helpers (Jaroslav Kysela) [RHEL-168082]
  - ASoC: wcd-mbhc-v2: remove unnecessary module_init/exit functions (Jaroslav Kysela) [RHEL-168082]
  - docs: fix 're-use' -> 'reuse' in documentation (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Add ACP7.0 match entries for Cirrus Logic parts (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Sort Cirrus Logic match entries (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Rename Cirrus Logic component match entries to include link and uid (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Sort match table into most specific first (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Add error unwind in resume (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Use cached regmap on resume (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Check errors in set_dai_fmt() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Propagate errors in set_bias_level() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Fix DAC deemphasis control handling (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw87390: Add Anbernic RG-DS amp driver (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: aw87390: Add Anbernic RG-DS Amplifier (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl_sai: add IMX_SCMI_MISC_DRV dependency (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: fix 64-bit division build failure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt5575: fix SPI dependency (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sdca: Fix missing regmap dependencies in Kconfig (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-core: add lockdep_assert_held() at snd_soc_unregister_dai() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tegra: set reg_default_cb callback (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tegra: Add AHUB writeable_reg for RX holes (Jaroslav Kysela) [RHEL-168082]
  - ASoC: wm8962: add .set_tdm_slot callback function (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: cv1800b: tidy Kconfig spacing (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: cv1800b: document DAC overwrite handling (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: add CV1800B internal DAC codec driver (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: add CV1800B internal ADC codec driver (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: sophgo,cv1800b: add ADC/DAC codec (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sophgo: add CV1800B I2S/TDM controller driver (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: sophgo,cv1800b: add I2S/TDM controller (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sun4i-spdif: Add missing check for devm_regmap_init_mmio (Jaroslav Kysela) [RHEL-168082]
  - ASoC: ac97: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-168082]
  - ASoC: pxa2xx-ac97: Remove platform_data (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: Remove pxa2xx-ac97.c (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: Remove ak4641 (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: add mixer support for Focusrite Forte (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: fix LG Gram Style 14 speakers (Jaroslav Kysela) [RHEL-168082]
  - ALSA: jack: Improve string handling in jack_kctl_name_gen (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/tas2781: Add tas2781_hda::catlog_id init (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: fsl,mqs: make gpr optional for SM-based SoCs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: wm8731: Remove unnecessary NULL check before clk_prepare_enable/clk_disable_unprepare (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rt1320-sdw: Refactor to reduce stack frames (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sdw_utils: Add quirk to ignore RT722 DMIC DAI (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: tidyup function naming (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: move struct snd_soc_dapm_context (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: add snd_soc_dapm_alloc() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: remove dev from snd_soc_dapm_context() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-dapm: remove compatibility definition for dapm (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-component: remove compatibility definition for component (Jaroslav Kysela) [RHEL-168082]
  - ASoC: soc-component: remove snd_soc_component_xxx() wrapper (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: don't use snd_soc_component_get_bias_level() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: Fix Kconfig dependencies for SND_SOC_ACPI_AMD_SDCA_QUIRKS (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rt56*: Remove IRQF_ONESHOT (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: Convert ti,tas2552 to DT schema (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/tas2781: Drop the unused macro definition (Jaroslav Kysela) [RHEL-168082]
  - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: controllers: intel: add support for Nova Lake (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: core: intel-dsp-config: Add support for NVL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: add support for Nova Lake NVL (Jaroslav Kysela) [RHEL-168082]
  - PCI: Add Intel Nova Lake audio Device ID (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda: Remove MODULE_SOFTDEP for snd-hda-codec-hdmi (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: fw loading for devices without pci bus (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Drop the & operator in front of function name (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Drop goto label (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Drop unnecessary if condition (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Simplify the logic in rz_ssi_stream_is_play() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: realtek: fix misspelling of "minimum" in comments (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8323: Enable proper DAPM widgets for chip power (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8323: Enable proper DAPM widgets for capture ADC (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8323: remove DAC enablement write from es8323_set_bias_level (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8323: Replace magic numbers with defined macros (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/cirrus_scodec_test: Use faux_device instead of platform_device (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: mt8192-afe-pcm: Fix clocks and clock-names (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Propagate error codes from regmap updates (Jaroslav Kysela) [RHEL-168082]
  - dt-bindings: sound: google,goldfish-audio: Convert to DT schema (Jaroslav Kysela) [RHEL-168082]
  - ASoC: intel: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw88261: use dvdd-supply regulator (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: document dvdd-supply property for awinic,aw88261 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: add channel sum control (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: add kcontrol for num biquads (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: add avdd and iovdd supply (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: clarify areg-supply documentation (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: add avdd and iovdd supply (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tlv320adcx140: power on/off the device on demand (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: clean up presonus s1810 consts (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: presonus s18xx uses little-endian (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/cs8409: Add quirk for CDB35L56-FOUR-HD (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp: soc-acpi: add is_device_rt712_vb() helper (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: drop unused Kconfig symbols (Jaroslav Kysela) [RHEL-168082]
  - ASoC: pxa: drop unused Kconfig symbol (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rtq9128: Add compatible changes for rtq9154 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: rtq9128: Add rtq9154 backward compatible (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rtq9128: Modify the chip initial setting (Jaroslav Kysela) [RHEL-168082]
  - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug (Jaroslav Kysela) [RHEL-168082]
  - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sof ipc4: Add sof_ipc4_widget_setup_msg_payload() and call it (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4: sof_ipc4_module_init_ext_init structs and macros (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sof: ipc4-topology: Add topology tokens domain_in stack & heap_bytes (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sof: Add domain_id, heap_bytes and stack_bytes to snd_sof_widget (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc/ops: Use guard() for spinlocks (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: Use guard() for spinlocks where it makes sense (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: mediatek: mtk-adsp-common: Use guard() for spinlock_irqsave (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: imx: imx-common: Use guard() for spinlock_irqsafe() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: amd: acp-ipc: Use guard() for spinlock_irq() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Use guard()/scoped_guard() for mutex locks where it makes sense (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: Use guard()/scoped_guard() for mutex locks where it makes sense (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: rt1320-sdw: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: Convert realtek,rt5651 to DT schema (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw88261: Add devicetree support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: aw88261: Remove AW88261_I2C_NAME macro (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: da7213: Move comma operator at the end of the line (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: es8375: remove unnecessary format check (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda - fix function names & missing function parameter (Jaroslav Kysela) [RHEL-168082]
  - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SDCA: Replace use of system_wq with system_dfl_wq (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Sort #include directives (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Drop unneeded braces in nau8821_hw_params() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Simplify conditional in nau8821_get_osr() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Drop superfluous return statement (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Cancel delayed work on component remove (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Cancel pending work before suspend (Jaroslav Kysela) [RHEL-168082]
  - ASoC: nau8821: Fixup nau8821_enable_jack_detect() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: es8328: Remove duplicate DAPM routes (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt5575: Add the codec driver for the ALC5575 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: realtek,rt5575: add support for ALC5575 (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8389: Update clock configuration (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8389: Add members about the version (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8389: Adjust wakeup configuration (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8389: Add members related to power supply (Jaroslav Kysela) [RHEL-168082]
  - ASoC: dt-bindings: ES8389: Add property about power supply (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test_bin: Add tests for offsets > 0xffff (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test_bin: Run test cases on long-offset blocks (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test: Increase size of XM and YM on Halo Core (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test_bin: Make patch function a test parameter (Jaroslav Kysela) [RHEL-168082]
  - firmware: cs_dsp: test_bin: Run test cases with v3 file format (Jaroslav Kysela) [RHEL-168082]
  - ALSA: echoaudio: adjust function name (Jaroslav Kysela) [RHEL-168082]
  - ALSA: ice1724: adjust function name reference (Jaroslav Kysela) [RHEL-168082]
  - ALSA: mixart: adjust field name reference (Jaroslav Kysela) [RHEL-168082]
  - soundwire: intel_ace2x: add SND_HDA_CORE dependency (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix the remainder calculation of r0 value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: alc5623: tidyup clock inversion in alc5623_set_dai_fmt() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix size_t format string (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix 32-bit link failure (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rockchip: Discard pm_runtime_put() return value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: avs: replace strcmp with sysfs_streq (Jaroslav Kysela) [RHEL-168082]
  - soundwire: Use bus methods for .probe(), .remove() and .shutdown() (Jaroslav Kysela) [RHEL-168082]
  - soundwire: Make remove function return no value (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: fix the warning the string may be truncated (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: Fix retry checking in rt1320_rae_load() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: Change return type of rt1320_t0_load() to void (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: audioreach: Constify function arguments (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: topology: Constify pointed snd_soc_tplg_dapm_widget (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: topology: Constify pointed DAPM widget structs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: topology: Constify pointed ar control structs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: topology: Constify pointed topology and vendor structs (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda/cm9825: Add GENE_TWL7 support for AAEON (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: Constify APR/GPR result structs (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: Constify GPR callback response data (Jaroslav Kysela) [RHEL-168082]
  - soc: qcom: apr: Use typedef for GPR callback member (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: Constify APR callback response data (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: wcd939x-sdw: use devres for regmap allocation (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: rt286: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: read slave properties from acpi table (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: use acpi initialisation table (Jaroslav Kysela) [RHEL-168082]
  - ASoc: tas2783A: fw name based on system details (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: fix error log for calibration data (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: update default init writes (Jaroslav Kysela) [RHEL-168082]
  - ASoC: tas2783A: use custom firmware (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-control: Add support for generic bytes control (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4: Add definition for generic bytes control (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Set initial param_id for bytes control type (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: tas2780: tidyup format check in tas2780_set_fmt() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: audioreach: Add support for VI Sense module (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: audioreach: Add support for Speaker Protection module (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: support RAE parameters loading (Jaroslav Kysela) [RHEL-168082]
  - ASoC: rt1320: support calibration and temperature/r0 loading (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: rt298: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: ti-common: support tas2563 amplifier (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: sof_rt5682: add tas2563 speaker amp support (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8326: Add kcontrol for DRE (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: ES8326: Add a kcontrol for PGAGAIN (Jaroslav Kysela) [RHEL-168082]
  - ALSA: oss: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: oss: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: timer: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: vmaster: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: hda: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usx2y: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: usb-audio: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: compress_offload: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: control: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - ALSA: pcm: Relax __free() variable declarations (Jaroslav Kysela) [RHEL-168082]
  - soundwire: qcom: Use guard to avoid mixing cleanup and goto (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Fix acronym for Intel Gemini Lake (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: pci-nvl: Set on_demand_dsp_boot for NVL-S (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: pci-ptl: Set on_demand_dsp_boot for PTL and WCL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: pci-lnl: Set on_demand_dsp_boot for LNL (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Intel: hda-sdw-bpt: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: sof-client: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: Add support for on-demand DSP boot (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: control: skip rpm calls in ext_volatile_get if not implemented (Jaroslav Kysela) [RHEL-168082]
  - ASoC: SOF: ipc4-loader: Remove redundant rpm resume_and_get from load_library (Jaroslav Kysela) [RHEL-168082]
  - ASoC: sdw-mockup: Drop dummy remove function (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codecs: wm0010: Replace cpu_to_be64 + le64_to_cpu with swab64 (Jaroslav Kysela) [RHEL-168082]
  - ASoc: qcom: q6afe: use guards consistently (Jaroslav Kysela) [RHEL-168082]
  - ASoC: davinci-mcasp: remove unneeded #ifdef (Jaroslav Kysela) [RHEL-168082]
  - ASoC: mediatek: mt8195: optimize property formatting error handling by using scnprintf() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: mediatek: mt8189-nau8825: don't use card->dapm directly (Jaroslav Kysela) [RHEL-168082]
  - ASoC: codec: rt274: Use devm_request_threaded_irq to manage IRQ lifetime and fix smatch warning (Jaroslav Kysela) [RHEL-168082]
  - ASoC: fsl: fsl_ssi: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Specify image names in the device descriptor (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Drop superfluous space in PCM code (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Simplify catpt_stream_read_position() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Update CATPT_IPC_ERROR macro (Jaroslav Kysela) [RHEL-168082]
  - ASoC: Intel: catpt: Move IPC error messages one level down (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp-sdw-sof: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168082]
  - ASoC: amd: acp-sdw-legacy: Fix confusing cleanup.h syntax (Jaroslav Kysela) [RHEL-168082]
  - ASoC: qcom: Minor readability improve with new lines (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Add support for 32 bits sample width (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Add support for 24 bits sample width (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Move DMA configuration (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Use dev variable in probe() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: renesas: rz-ssi: Remove trailing comma in the terminator entry (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: Refuse to probe seq drivers with non-bus probe or remove (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: Use bus specific probe and remove (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: midi: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: ump: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: opl3: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: opl4: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: sb: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: emu10k1: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ALSA: seq: oss: Convert to snd_seq bus probe mechanism (Jaroslav Kysela) [RHEL-168082]
  - ASoC: asoc.h: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: audio_topology: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: audio_helper: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: audio_codec: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: arizona-micsupp: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]
  - ASoC: arizona-haptics: convert to snd_soc_dapm_xxx() (Jaroslav Kysela) [RHEL-168082]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-236.el10]
changelog:
  - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178929] {CVE-2026-46243}
  - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
  - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-180187]
  - mei: me: add nova lake point S DID (Steve Best) [RHEL-117353]
  - platform/x86/intel/uncore-freq: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-133081]
  - platform/x86/intel/uncore-freq: Replace sprintf() with scnprintf() (Steve Best) [RHEL-133081]
  - platform/x86: intel-uncore-freq: fix all header kernel-doc warnings (Steve Best) [RHEL-133081]
  - platform/x86/intel-uncore-freq: Present unique domain ID per package (Steve Best) [RHEL-133081]
  - platform/x86/intel-uncore-freq: Fix warning in partitioned system (Steve Best) [RHEL-133081]
  - pinctrl: intel: platform: Add Nova Lake to the list of supported (Steve Best) [RHEL-129783]
  - scsi: qla2xxx: Add support to report MPI FW state (Nilesh Javali) [RHEL-157286]
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-81413] {CVE-2024-58007}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-237.el10]
changelog:
  - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180193]
  - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180193]
  - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180193]
  - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180193]
  - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180193]
  - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180193]
  - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180193]
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180193]
  - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-163186]
  - dm-raid: only requeue bios when dm is suspending (Nigel Croxon) [RHEL-129337]
  - md: merge mddev serialize_policy into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md: merge mddev faillast_dev into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md: merge mddev has_superblock into mddev_flags (Nigel Croxon) [RHEL-129337]
  - md/raid1: serialize overlap io for writemostly disk (Nigel Croxon) [RHEL-129337]
  - md/raid1: fix the comparing region of interval tree (Nigel Croxon) [RHEL-129337]
  - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-129337] {CVE-2026-43163}
  - md/raid5: Fix UAF on IO across the reshape position (Nigel Croxon) [RHEL-129337]
  - md/dm-raid: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: raise barrier before state machine transition (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: skip reading rdevs that are not in_sync (Nigel Croxon) [RHEL-129337]
  - md: suppress spurious superblock update error message for dm-raid (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout (Nigel Croxon) [RHEL-129337]
  - md/raid5: fix IO hang with degraded array with llbitmap (Nigel Croxon) [RHEL-129337]
  - md: adding a CONFIG_MD_LLBITMAP file to build (Nigel Croxon) [RHEL-129337]
  - md: Fix forward incompatibility from configurable logical block size (Nigel Croxon) [RHEL-129337]
  - md: Fix logical_block_size configuration being overwritten (Nigel Croxon) [RHEL-129337]
  - md: suspend array while updating raid_disks via sysfs (Nigel Croxon) [RHEL-129337] {CVE-2025-71225}
  - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Nigel Croxon) [RHEL-129337] {CVE-2025-71135}
  - md: Fix static checker warning in analyze_sbs (Nigel Croxon) [RHEL-129337]
  - md: remove legacy 1s delay in md_notify_reboot (Nigel Croxon) [RHEL-129337]
  - md/raid5: fix IO hang when array is broken with IO inflight (Nigel Croxon) [RHEL-129337]
  - md: warn about updating super block failure (Nigel Croxon) [RHEL-129337]
  - md/raid0: fix NULL pointer dereference in create_strip_zones() for dm-raid (Nigel Croxon) [RHEL-129337]
  - md: allow configuring logical block size (Nigel Croxon) [RHEL-129337]
  - md: add check_new_feature module parameter (Nigel Croxon) [RHEL-129337]
  - md/raid0: Move queue limit setup before r0conf initialization (Nigel Croxon) [RHEL-129337]
  - md: init bioset in mddev_init (Nigel Croxon) [RHEL-129337] {CVE-2025-68368}
  - md: delete md_redundancy_group when array is becoming inactive (Nigel Croxon) [RHEL-129337]
  - md: prevent adding disks with larger logical_block_size to active arrays (Nigel Croxon) [RHEL-129337]
  - md/raid5: remove redundant __GFP_NOWARN (Nigel Croxon) [RHEL-129337]
  - md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-129337] {CVE-2025-68373}
  - md/md-llbitmap: Remove unneeded semicolon (Nigel Croxon) [RHEL-129337]
  - md/md-linear: Enable atomic writes (Nigel Croxon) [RHEL-129337]
  - Factor out code into md_should_do_recovery() (Nigel Croxon) [RHEL-129337]
  - md: fix rcu protection in md_wakeup_thread (Nigel Croxon) [RHEL-129337] {CVE-2025-68374}
  - md: delete mddev kobj before deleting gendisk kobj (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: Use DIV_ROUND_UP_SECTOR_T (Nigel Croxon) [RHEL-129337]
  - md/md-llbitmap: introduce new lockless bitmap (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: make method bitmap_ops->daemon_work optional (Nigel Croxon) [RHEL-129337]
  - md: add a new recovery_flag MD_RECOVERY_LAZY_RECOVER (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new method blocks_synced() in bitmap_operations (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new method skip_sync_blocks() in bitmap_operations (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: delay registration of bitmap_ops until creating bitmap (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: add a new sysfs api bitmap_type (Nigel Croxon) [RHEL-129337]
  - md: add a new mddev field 'bitmap_id' (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: support discard for bitmap ops (Nigel Croxon) [RHEL-129337]
  - md/md-bitmap: introduce CONFIG_MD_BITMAP (Nigel Croxon) [RHEL-129337]
  - redhat/configs: Add configs for RISC-V core updates (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Teardown riscv specific bits after kvm_exit (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Add common nested acceleration support (Jennifer Berringer) [RHEL-147291]
  - riscv: KVM: add basic support for host vs guest profiling (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Order the object files alphabetically (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strrchr() implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strchr() implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: add strnlen() implementation (Jennifer Berringer) [RHEL-147291]
  - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node (Jennifer Berringer) [RHEL-147291]
  - riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set (Jennifer Berringer) [RHEL-147291]
  - riscv: kgdb: fix several debug register assignment bugs (Jennifer Berringer) [RHEL-147291]
  - riscv: lib: optimize strlen loop efficiency (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: selftests: Add Zalasr extensions to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zalasr extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: add Zilsd and Zclsd extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - riscv: KVM: allow Zilsd and Zclsd extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: validate input vector csr registers (Jennifer Berringer) [RHEL-147291]
  - riscv: csr: define vtype register elements (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: init vector context with proper vlenb (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: return ENODATA for inactive vector extension (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: define copy_user_page() as copy_page() (Jennifer Berringer) [RHEL-147291]
  - riscv: compat: fix COMPAT_UTS_MACHINE definition (Jennifer Berringer) [RHEL-147291]
  - errata/sifive: remove unreliable warn_miss_errata (Jennifer Berringer) [RHEL-147291]
  - riscv: fix minor typo in syscall.h comment (Jennifer Berringer) [RHEL-147291]
  - riscv: kvm: Fix vstimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: suspend: Fix stimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: clocksource: Fix stimecmp update hazard on RV32 (Jennifer Berringer) [RHEL-147291]
  - riscv: trace: fix snapshot deadlock with sbi ecall (Jennifer Berringer) [RHEL-147291] {CVE-2026-23217}
  - riscv: remove irqflags.h inclusion in asm/bitops.h (Jennifer Berringer) [RHEL-147291]
  - riscv: cpu_ops_sbi: smp_processor_id() returns int, not unsigned int (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_image: Fix dead link to boot-image-header.rst (Jennifer Berringer) [RHEL-147291]
  - riscv: pgtable: Cleanup useless VA_USER_XXX definitions (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: Fix Zk bundled extension missing Zknh (Jennifer Berringer) [RHEL-147291]
  - riscv: Sanitize syscall table indexing under speculation (Jennifer Berringer) [RHEL-147291] {CVE-2025-71203}
  - riscv/atomic.h: use RISCV_FULL_BARRIER in _arch_atomic* function. (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zilsd and Zclsd ISA extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: add ISA extension parsing for Zilsd and Zclsd (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: use xchg() on non-atomic_long_t variables, not atomic_long_xchg() (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: ptep_get_and_clear(): avoid atomic ops when !CONFIG_SMP (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: pmdp_huge_get_and_clear(): avoid atomic ops when !CONFIG_SMP (Jennifer Berringer) [RHEL-147291]
  - selftests/riscv: Add Zicbop prefetch test (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Expose Zicbop extension and its block size (Jennifer Berringer) [RHEL-147291]
  - riscv: Introduce Zalasr instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Export Zalasr extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for Zalasr (Jennifer Berringer) [RHEL-147291]
  - riscv: add RISC-V Svrsw60t59b extension support (Jennifer Berringer) [RHEL-147291]
  - riscv: ptrace: Optimize the allocation of vector regset (Jennifer Berringer) [RHEL-147291]
  - riscv: cmpxchg: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: bitops: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: hweight: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: checksum: Use riscv_has_extension_likely (Jennifer Berringer) [RHEL-147291]
  - riscv: pgtable: Use riscv_has_extension_unlikely (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add bfloat16 extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Zicbop extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow bfloat16 extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zicbop extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Provide UAPI for Zicbop block size (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Change zicbom/zicboz block size to depend on the host isa (Jennifer Berringer) [RHEL-147291]
  - riscv: Update MIPS vendor id to 0x127 (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix CONFIG_AS_HAS_INSN for new .insn usage (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove redundant judgment for the default build target (Jennifer Berringer) [RHEL-147291]
  - riscv: Build loader.bin exclusively for Canaan K210 (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Replace deprecated strcpy in kgdb_arch_handle_qxfer_pkt (Jennifer Berringer) [RHEL-147291]
  - riscv: asm: use .insn for making custom instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro (Jennifer Berringer) [RHEL-147291]
  - riscv: stacktrace: Disable KASAN checks for non-current tasks (Jennifer Berringer) [RHEL-147291] {CVE-2025-40358}
  - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id() (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: avoid uninitialized variable in has_thead_homogeneous_vlenb() (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Fix stale vDSO data for late-initialized keys at boot (Jennifer Berringer) [RHEL-147291]
  - riscv: add a forward declaration for cpuinfo_op (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Don't print details of CPUs disabled in DT (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove the PER_CPU_OFFSET_SHIFT macro (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Define MAX_POSSIBLE_PHYSMEM_BITS for zsmalloc (Jennifer Berringer) [RHEL-147291]
  - riscv: Register IPI IRQs with unique names (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Define pgprot_dmacoherent() for non-coherent devices (Jennifer Berringer) [RHEL-147291]
  - riscv: Respect dependencies of ARCH_HAS_ELF_CORE_EFLAGS (Jennifer Berringer) [RHEL-147291]
  - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Fix probe address validation (Jennifer Berringer) [RHEL-147291]
  - riscv: entry: fix typo in comment 'instruciton' -> 'instruction' (Jennifer Berringer) [RHEL-147291]
  - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors (Jennifer Berringer) [RHEL-147291]
  - riscv: kgdb: Ensure that BUFMAX > NUMREGBYTES (Jennifer Berringer) [RHEL-147291]
  - riscv: bpf: Fix uninitialized symbol 'retval_off' (Jennifer Berringer) [RHEL-147291]
  - riscv: errata: Fix the PAUSE Opcode for MIPS P8700 (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add MIPS vendor extension probing (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xmipsexectl instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xmipsexectl as a vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: add validation for zfa, zfh and zfhmin (Jennifer Berringer) [RHEL-147291]
  - riscv: Move vendor errata definitions to new header (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable ARCH_HAVE_NMI_SAFE_CMPXCHG (Jennifer Berringer) [RHEL-147291]
  - riscv: introduce asm/swab.h (Jennifer Berringer) [RHEL-147291]
  - riscv: mmap(): use unsigned offset type in riscv_sys_mmap (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_ITYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_UTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_RD_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_BTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_C2_RS1_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RVC_EXTRACT_JTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_BTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_RS1_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Remove duplication of RV_EXTRACT_JTYPE_IMM (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Move branch_funct3 to insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: kprobes: Move branch_rs2_idx to insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Move all duplicate insn parsing macros into asm/insn.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Strengthen duplicate and inconsistent definition of RV_X() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix typo EXRACT -> EXTRACT (Jennifer Berringer) [RHEL-147291]
  - riscv: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-uapi headers (Jennifer Berringer) [RHEL-147291]
  - riscv: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: Sign extend struct ops return values properly (Jennifer Berringer) [RHEL-147291] {CVE-2025-40079}
  - riscv: use an atomic xchg in pudp_huge_get_and_clear() (Jennifer Berringer) [RHEL-147291]
  - binfmt_elf: preserve original ELF e_flags for core dumps (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec: Initialize kexec_buf struct (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: use lw when reading int cpu in bpf_get_smp_processor_id (Jennifer Berringer) [RHEL-147291]
  - riscv, bpf: use lw when reading int cpu in BPF_MOV64_PERCPU_REG (Jennifer Berringer) [RHEL-147291]
  - riscv: use lw when reading int cpu in asm_per_cpu (Jennifer Berringer) [RHEL-147291]
  - riscv: use lw when reading int cpu in new_vmalloc_check (Jennifer Berringer) [RHEL-147291]
  - riscv: optimize gcd() performance on RISC-V without Zbb extension (Jennifer Berringer) [RHEL-147291]
  - riscv: optimize gcd() code size when CONFIG_RISCV_ISA_ZBB is disabled (Jennifer Berringer) [RHEL-147291]
  - lib/math/gcd: use static key to select implementation at runtime (Jennifer Berringer) [RHEL-147291]
  - riscv: Helper to parse hart index (Jennifer Berringer) [RHEL-147291]
  - riscv: traps_misaligned: properly sign extend value in misaligned load handler (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable interrupt during exception handling (Jennifer Berringer) [RHEL-147291]
  - riscv: Stop considering R_RISCV_NONE as bad relocations (Jennifer Berringer) [RHEL-147291]
  - riscv: cpu_ops_sbi: Use static array for boot_data (Jennifer Berringer) [RHEL-147291] {CVE-2025-38407}
  - riscv: export boot_cpu_hartid (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix sparse warning in vendor_extensions/sifive.c (Jennifer Berringer) [RHEL-147291]
  - Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" (Jennifer Berringer) [RHEL-147291] {CVE-2025-38434}
  - riscv: fix runtime constant support for nommu kernels (Jennifer Berringer) [RHEL-147291] {CVE-2025-38433}
  - riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Add support for Svinval extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Improve Kconfig help for RISCV_ISA_V_PREEMPTIVE (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zabha extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Make regs_irqs_disabled() more clear (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Kconfig: Fix help text of CMDLINE_EXTEND (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for PUD THP (Jennifer Berringer) [RHEL-147291]
  - riscv: xchg: Prefetch the destination word for sc.w (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ARCH_HAS_PREFETCH[W] support with Zicbop (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for Zicbop (Jennifer Berringer) [RHEL-147291]
  - riscv: Introduce Zicbop instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_file: Support loading Image binary file (Jennifer Berringer) [RHEL-147291]
  - riscv: kexec_file: Split the loading of kernel and others (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: add a function to check misalign trap delegability (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: move emulated access uniformity check in a function (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: declare misaligned_access_speed under CONFIG_RISCV_MISALIGNED (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: use on_each_cpu() for scalar misaligned access probing (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: request misaligned exception from SBI (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add SBI FWFT extension calls (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add FWFT extension interface (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add new SBI error mappings (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: remove useless parenthesis (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: add Firmware Feature (FWFT) SBI extensions definitions (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Use nacl_csr_xyz() for accessing H-extension CSRs (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Add defines for the SBI nested acceleration extension (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Save/restore HSTATUS in C source (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvfwmaccqqq vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvfnrclipxfqf vendor extension (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add SiFive vendor extension support and probe for xsfqmaccdod and xsfqmaccqoq (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document SiFive xsfvqmaccdod and xsfvqmaccqoq vendor extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: Add SiFive xsfvqmaccdod and xsfvqmaccqoq vendor extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: Disallow PR_GET_TAGGED_ADDR_CTRL without Supm (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL (Jennifer Berringer) [RHEL-147291] {CVE-2025-37966}
  - riscv: misaligned: use get_user() instead of __get_user() (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: enable IRQs while handling misaligned accesses (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: factorize trap handling (Jennifer Berringer) [RHEL-147291]
  - riscv: misaligned: Add handling for ZCB instructions (Jennifer Berringer) [RHEL-147291]
  - riscv: uprobes: Add missing fence.i after building the XOL buffer (Jennifer Berringer) [RHEL-147291] {CVE-2025-37822}
  - riscv: Replace function-like macro by static inline function (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (Jennifer Berringer) [RHEL-147291]
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (Jennifer Berringer) [RHEL-147291]
  - riscv: Provide all alternative macros all the time (Jennifer Berringer) [RHEL-147291]
  - riscv: Properly export reserved regions in /proc/iomem (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix unaligned access info messages (Jennifer Berringer) [RHEL-147291]
  - riscv: Avoid fortify warning in syscall_get_arguments() (Jennifer Berringer) [RHEL-147291]
  - riscv: Use kvmalloc_array on relocation_hashtable (Jennifer Berringer) [RHEL-147291]
  - riscv/purgatory: 4B align purgatory_start (Jennifer Berringer) [RHEL-147291]
  - riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte (Jennifer Berringer) [RHEL-147291]
  - riscv: print hartid on bringup (Jennifer Berringer) [RHEL-147291]
  - riscv: Add norvc after .option arch in runtime const (Jennifer Berringer) [RHEL-147291]
  - RISC-V: errata: Use medany for relocatable builds (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add f & d extension validation checks (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add vector crypto extension validation checks (Jennifer Berringer) [RHEL-147291]
  - RISC-V: add vector extension validation checks (Jennifer Berringer) [RHEL-147291]
  - riscv: Add runtime constant support (Jennifer Berringer) [RHEL-147291]
  - riscv: Move nop definition to insn-def.h (Jennifer Berringer) [RHEL-147291]
  - riscv: Add parameter for skipping access speed tests (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix set up of vector cpu hotplug callback (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix set up of cpu hotplug callbacks (Jennifer Berringer) [RHEL-147291]
  - riscv: Change check_unaligned_access_speed_all_cpus to void (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix check_unaligned_access_all_cpus (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix riscv_online_cpu_vec (Jennifer Berringer) [RHEL-147291]
  - riscv: Annotate unaligned access init functions (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Zaamo/Zalrsc extensions to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zaamo/Zalrsc extensions for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zaamo and Zalrsc extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: add parsing for Zaamo and Zalrsc extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler (Jennifer Berringer) [RHEL-147291] {CVE-2025-22069}
  - riscv: fgraph: Select HAVE_FUNCTION_GRAPH_TRACER depends on HAVE_DYNAMIC_FTRACE_WITH_ARGS (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix missing __free_pages() in check_vector_unaligned_access() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix the __riscv_copy_vec_words_unaligned implementation (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Don't use %pK through printk (Jennifer Berringer) [RHEL-147291]
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Jennifer Berringer) [RHEL-147291]
  - riscv: tracing: Fix __write_overflow_field in ftrace_partial_regs() (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix a comment typo in set_mm_asid() (Jennifer Berringer) [RHEL-147291]
  - clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug (Jennifer Berringer) [RHEL-147291]
  - riscv: Add stimecmp save and restore (Jennifer Berringer) [RHEL-147291]
  - riscv: Simplify base extension checks and direct boolean return (Jennifer Berringer) [RHEL-147291]
  - riscv: Remove unused TASK_TI_FLAGS (Jennifer Berringer) [RHEL-147291]
  - RISC-V: selftests: Add TEST_ZICBOM into CBO tests (Jennifer Berringer) [RHEL-147291]
  - RISC-V: hwprobe: Expose Zicbom extension and its block size (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Enable cbo.clean/flush in usermode (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export bfloat16 ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: add ISA extension parsing for bfloat16 ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement smp_cond_load8/16() with Zawrs (Jennifer Berringer) [RHEL-147291]
  - riscv: Call secondary mmu notifier when flushing the tlb (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: export Zicntr and Zihpm extensions (Jennifer Berringer) [RHEL-147291]
  - riscv: remove useless pc check in stacktrace handling (Jennifer Berringer) [RHEL-147291]
  - riscv: Support huge pfnmaps (Jennifer Berringer) [RHEL-147291]
  - RISC-V: separate Zbb optimisations requiring and not requiring toolchain support (Jennifer Berringer) [RHEL-147291]
  - RISC-V: clarify what some RISCV_ISA* config options do (Jennifer Berringer) [RHEL-147291]
  - riscv: fix test_and_{set,clear}_bit ordering documentation (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Svvptc/Zabha/Ziccrse exts to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Ziccrse extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Zabha extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Svvptc extension for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - riscv: signal: fix signal_minsigstksz (Jennifer Berringer) [RHEL-147291]
  - riscv: signal: fix signal frame size (Jennifer Berringer) [RHEL-147291]
  - riscv/futex: sign extend compare value in atomic cmpxchg (Jennifer Berringer) [RHEL-147291]
  - riscv/atomic: Do proper sign extension also for unsigned in arch_cmpxchg (Jennifer Berringer) [RHEL-147291]
  - riscv: cpufeature: use bitmap_equal() instead of memcmp() (Jennifer Berringer) [RHEL-147291]
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties (Jennifer Berringer) [RHEL-147291]
  - riscv: export __cpuid_to_hartid_map (Jennifer Berringer) [RHEL-147291]
  - riscv: sbi: vendorid_list: Add Microchip Technology to the vendor list (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Document thead vendor extensions and xtheadvector extension (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Fix context save/restore with xtheadvector (Jennifer Berringer) [RHEL-147291] {CVE-2025-38435}
  - riscv: Add ghostwrite vulnerability (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Add thead vendor extension probing (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Support xtheadvector save/restore (Jennifer Berringer) [RHEL-147291]
  - riscv: Add xtheadvector instruction definitions (Jennifer Berringer) [RHEL-147291]
  - riscv: csr: Add CSR encodings for CSR_VXRM/CSR_VXSAT (Jennifer Berringer) [RHEL-147291]
  - RISC-V: define the elements of the VCSR vector CSR (Jennifer Berringer) [RHEL-147291]
  - riscv: vector: Use vlenb from DT for thead (Jennifer Berringer) [RHEL-147291]
  - riscv: Add thead and xtheadvector as a vendor extension (Jennifer Berringer) [RHEL-147291]
  - RISC-V: hwprobe: Document unaligned vector perf key (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Mark riscv_v_init() as __init (Jennifer Berringer) [RHEL-147291]
  - riscv: Always inline bitops (Jennifer Berringer) [RHEL-147291]
  - riscv/futex: Optimize atomic cmpxchg (Jennifer Berringer) [RHEL-147291]
  - tools: selftests: riscv: Add test count for vstate_prctl (Jennifer Berringer) [RHEL-147291]
  - tools: selftests: riscv: Add pass message for v_initval_nolibc (Jennifer Berringer) [RHEL-147291]
  - riscv: use local label names instead of global ones in assembly (Jennifer Berringer) [RHEL-147291]
  - riscv: qspinlock: Fixup _Q_PENDING_LOOPS definition (Jennifer Berringer) [RHEL-147291]
  - riscv: stacktrace: fix backtracing through exceptions (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Fix the out of bound issue of vmemmap address (Jennifer Berringer) [RHEL-147291] {CVE-2024-57945}
  - riscv: kprobes: Fix incorrect address calculation (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix sleeping in invalid context in die() (Jennifer Berringer) [RHEL-147291] {CVE-2024-57939}
  - riscv: module: remove relocation_head rel_entry member allocation (Jennifer Berringer) [RHEL-147291]
  - riscv: selftests: Fix warnings pointer masking test (Jennifer Berringer) [RHEL-147291]
  - riscv: mm: Do not call pmd dtor on vmemmap page table teardown (Jennifer Berringer) [RHEL-147291] {CVE-2024-56673}
  - riscv: Fix IPIs usage in kfence_protect_page() (Jennifer Berringer) [RHEL-147291] {CVE-2024-53687}
  - riscv: Fixup boot failure when CONFIG_DEBUG_RT_MUTEXES=y (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Svade and Svadu Extension to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Add Svade and Svadu Extensions Support for Guest/VM (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Add Svade and Svadu Extensions Support (Jennifer Berringer) [RHEL-147291]
  - riscv: Fix default misaligned access trap (Jennifer Berringer) [RHEL-147291]
  - riscv: Add qspinlock support (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for Ziccrse (Jennifer Berringer) [RHEL-147291]
  - asm-generic: ticket-lock: Add separate ticket-lock.h (Jennifer Berringer) [RHEL-147291]
  - asm-generic: ticket-lock: Reuse arch_spinlock_t of qspinlock (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement xchg8/16() using Zabha (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement arch_cmpxchg128() using Zacas (Jennifer Berringer) [RHEL-147291]
  - riscv: Improve zacas fully-ordered cmpxchg() (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement cmpxchg8/16() using Zabha (Jennifer Berringer) [RHEL-147291]
  - riscv: Implement cmpxchg32/64() using Zacas (Jennifer Berringer) [RHEL-147291]
  - riscv: Do not fail to build on byte/halfword operations with Zawrs (Jennifer Berringer) [RHEL-147291]
  - riscv: Move cpufeature.h macros into their own header (Jennifer Berringer) [RHEL-147291]
  - KVM: riscv: selftests: Add Smnpm and Ssnpm to get-reg-list test (Jennifer Berringer) [RHEL-147291]
  - RISC-V: KVM: Allow Smnpm and Ssnpm extensions for guests (Jennifer Berringer) [RHEL-147291]
  - riscv: hwprobe: Export the Supm ISA extension (Jennifer Berringer) [RHEL-147291]
  - riscv: selftests: Add a pointer masking test (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for the tagged address ABI (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for userspace pointer masking (Jennifer Berringer) [RHEL-147291]
  - riscv: Add CSR definitions for pointer masking (Jennifer Berringer) [RHEL-147291]
  - riscv: Add ISA extension parsing for pointer masking (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Report vector unaligned access speed hwprobe (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Detect unaligned vector accesses supported (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Replace RISCV_MISALIGNED with RISCV_SCALAR_MISALIGNED (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Scalar unaligned access emulated on hotplug CPUs (Jennifer Berringer) [RHEL-147291]
  - RISC-V: Check scalar unaligned access on all CPUs (Jennifer Berringer) [RHEL-147291]
  - riscv: Call riscv_user_isa_enable() only on the boot hart (Jennifer Berringer) [RHEL-147291]
  - riscv: Add support for per-thread envcfg CSR values (Jennifer Berringer) [RHEL-147291]
  - riscv: Enable cbo.zero only when all harts support Zicboz (Jennifer Berringer) [RHEL-147291]
  - perf vendor events arm64: Add Tegra410 Olympus PMU events (Mark Salter) [RHEL-110828]
  - configs: arm64: enable Tegra410 PMU (Mark Salter) [RHEL-110828]
  - perf: add NVIDIA Tegra410 C2C PMU (Mark Salter) [RHEL-110828]
  - perf: add NVIDIA Tegra410 CPU Memory Latency PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 PCIE-TGT PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 PCIE PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: Add arm_cspmu_acpi_dev_get (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Add Tegra410 UCF PMU (Mark Salter) [RHEL-110828]
  - perf/arm_cspmu: nvidia: Rename doc to Tegra241 (Mark Salter) [RHEL-110828]
  - i2c: tegra: Add support for Tegra410 (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add logic to support different register offsets (Mark Salter) [RHEL-143333]
  - i2c: tegra: Introduce tegra_i2c_variant to identify DVC and VI (Mark Salter) [RHEL-143333]
  - i2c: tegra: Don't mark devices with pins as IRQ safe (Mark Salter) [RHEL-143333]
  - i2c: tegra: remove unused rst (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add Tegra264 support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add support for SW mutex register (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add HS mode support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Update Tegra256 timing parameters (Mark Salter) [RHEL-143333]
  - i2c: tegra: Use separate variables for fast and fastplus (Mark Salter) [RHEL-143333]
  - i2c: tegra: Do not configure DMA if not supported (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add Tegra256 support (Mark Salter) [RHEL-143333]
  - i2c: tegra: Remove dma_sync_*() calls (Mark Salter) [RHEL-143333]
  - i2c: tegra: Add missing kernel-doc for dma_dev member (Mark Salter) [RHEL-143333]
  - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172974] {CVE-2026-31581}
  - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171687] {CVE-2026-31467}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-238.el10]
changelog:
  - redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
  - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (Mamatha Inamdar) [RHEL-174883]
  - powerpc/fadump: Reserve page-aligned boot_memory_size during fadump_reserve_mem (Mamatha Inamdar) [RHEL-174883]
  - powerpc/fadump: Refactor and prepare fadump_cma_init for late init (Mamatha Inamdar) [RHEL-174883]
  - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179440] {CVE-2026-46054}
  - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179440]
  - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180014] {CVE-2026-46173}
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170766] {CVE-2026-31532}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-239.el10]
changelog:
  - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183464]
  - io_uring: Fix KASAN UAF in io_kbuf_recycle_legacy (Jeff Moyer) [RHEL-183200]
  - crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182119]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182119]
  - driver core: generalize driver_override in struct device (Mircea Dragan) [RHEL-113464]
  - PCI: Initialize temporary device in new_id_store() (Mircea Dragan) [RHEL-113464]
  - s390/ap: use generic driver_override infrastructure (Mircea Dragan) [RHEL-113464]
  - s390/ap: Restrict driver_override versus apmask and aqmask use (Mircea Dragan) [RHEL-113464]
  - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Mircea Dragan) [RHEL-113464]
  - s390/ap: Support driver_override for AP queue devices (Mircea Dragan) [RHEL-113464]
  - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Mircea Dragan) [RHEL-113464]
  - redhat/configs: set NXP storage driver to built-in for boot speed (Ed Chong) [RHEL-181039]
  - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180316] {CVE-2026-43260}
  - objtool: Fix Clang jump table detection (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix mkstemp() failure with long paths (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix data alignment in __clone_symbol() (Yannick Cote) [RHEL-152189]
  - objtool: Fix another stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Handle Clang RSP musical chairs (Yannick Cote) [RHEL-152189]
  - objtool: Fix ERROR_INSN() error message (Yannick Cote) [RHEL-152189]
  - objtool: Fix data alignment in elf_add_data() (Yannick Cote) [RHEL-152189]
  - objtool: Use HOSTCFLAGS for HAVE_XXHASH test (Yannick Cote) [RHEL-152189]
  - objtool/klp: Avoid NULL pointer dereference when printing code symbol name (Yannick Cote) [RHEL-152189]
  - objtool/klp: Disable unsupported pr_debug() usage (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix detection of corrupt static branch/call entries (Yannick Cote) [RHEL-152189]
  - kbuild: Leave objtool binary around with 'make clean' (Yannick Cote) [RHEL-152189]
  - kbuild: Add objtool to top-level clean target (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix symbol correlation for orphaned local symbols (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix bug table handling for __WARN_printf() (Yannick Cote) [RHEL-152189]
  - objtool: Replace custom macros in elf.c with shared ones (Yannick Cote) [RHEL-152189]
  - objtool: Print bfd_vma as unsigned long long on ia32-x86_64 cross build (Yannick Cote) [RHEL-152189]
  - objtool: Fix libopcodes linking with static libraries (Yannick Cote) [RHEL-152189]
  - kbuild: prefer ${NM} in check-function-names.sh (Yannick Cote) [RHEL-152189]
  - objtool: fix build failure due to missing libopcodes check (Yannick Cote) [RHEL-152189]
  - objtool: fix compilation failure with the x32 toolchain (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Add more robust signal error handling, detect and warn about stack overflows (Yannick Cote) [RHEL-152189]
  - objtool: Fix stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Fix segfault on unknown alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Build with disassembly can fail when including bdf.h (Yannick Cote) [RHEL-152189]
  - objtool: Trim trailing NOPs in alternative (Yannick Cote) [RHEL-152189]
  - objtool: Add wide output for disassembly (Yannick Cote) [RHEL-152189]
  - objtool: Compact output for alternatives with one instruction (Yannick Cote) [RHEL-152189]
  - objtool: Improve naming of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Add Function to get the name of a CPU feature (Yannick Cote) [RHEL-152189]
  - objtool: Provide access to feature and flags of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Fix address references in alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble jump table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble exception table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print addresses with alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print headers for alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Preserve alternatives order (Yannick Cote) [RHEL-152189]
  - objtool: Add the --disas=<function-pattern> action (Yannick Cote) [RHEL-152189]
  - objtool: Do not validate IBT for .return_sites and .call_sites (Yannick Cote) [RHEL-152189]
  - objtool: Improve tracing of alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Add functions to better name alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Identify the different types of alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Improve register reporting during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Trace instruction state changes during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Add option to trace function validation (Yannick Cote) [RHEL-152189]
  - objtool: Record symbol name max length (Yannick Cote) [RHEL-152189]
  - objtool: Extract code to validate instruction from the validate branch loop (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble instruction on warning or backtrace (Yannick Cote) [RHEL-152189]
  - objtool: Store instruction disassembly result (Yannick Cote) [RHEL-152189]
  - objtool: Print symbol during disassembly (Yannick Cote) [RHEL-152189]
  - tool build: Remove annoying newline in build output (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble code with libopcodes instead of running objdump (Yannick Cote) [RHEL-152189]
  - objtool: Create disassembly context (Yannick Cote) [RHEL-152189]
  - objtool: Move disassembly functions to a separated file (Yannick Cote) [RHEL-152189]
  - objtool: Remove second pass of .cold function correlation (Yannick Cote) [RHEL-152189]
  - objtool: Skip non-canonical aliased symbols in add_jump_table_alts() (Yannick Cote) [RHEL-152189]
  - objtool: Return canonical symbol when aliases exist in symbol finding helpers (Yannick Cote) [RHEL-152189]
  - objtool: Don't alias undefined symbols (Yannick Cote) [RHEL-152189]
  - objtool: Fix .cold function detection for duplicate symbols (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/x86: Fix NOP decode (Yannick Cote) [RHEL-152189]
  - objtool/x86: Add UDB support (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark types based on break immediate code (Yannick Cote) [RHEL-152189]
  - livepatch/klp-build: Fix inconsistent kernel version (Yannick Cote) [RHEL-152193]
  - livepatch: Free klp_{object,func}_ext data after initialization (Yannick Cote) [RHEL-152193]
  - livepatch: Fix having __klp_objects relics in non-livepatch modules (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Require Clang assembler >= 20 (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Fix klp-build vs CONFIG_MODULE_SRCVERSION_ALL (Yannick Cote) [RHEL-152193]
  - selftests: livepatch: use canonical ftrace path (Yannick Cote) [RHEL-152193]
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Yannick Cote) [RHEL-152193]
  - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-168848]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-168848]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-168848]
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and list header in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: release local_lock before re-enabling softirqs (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-168848]
  - netfilter: bridge: eb_tables: close module init race (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: move to two-stage removal scheme (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xtables_unregister_table_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: unregister the templates first (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allocate hook ops while under mutex (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allow initial table replace without emitting audit log message (Florian Westphal) [RHEL-168848]
  - ipvs: do not leak dest after get from dest trash (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: ensure sufficient headroom in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: fix L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: skip L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_socket: skip socket lookup for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-168848]
  - netfilter: skip recording stale or retransmitted INIT (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-168848]
  - netfilter: reject zero shift in nft_bitwise (Florian Westphal) [RHEL-168848]
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-168848]
  - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-168848]
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-168848]
  - ipvs: fix MTU check for GSO packets in tunnel mode (Florian Westphal) [RHEL-168848]
  - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-168848]
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_tproxy.sh: adjust to socat changes (Florian Westphal) [RHEL-168848]
  - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove UDP-Lite conntrack support (Florian Westphal) [RHEL-168848]
  - netfilter: xt_socket: enable defrag after all other checks (Florian Westphal) [RHEL-168848]
  - netfilter: xt_HL: add pr_fmt and checkentry validation (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink: prefer skb_mac_header helpers (Florian Westphal) [RHEL-168848]
  - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-168848]
  - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-168848]
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-168848]
  - ipvs: fix NULL deref in ip_vs_add_service error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta: add double-tagged vlan and pppoe support (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add netlink policy based cap on registers (Florian Westphal) [RHEL-168848]
  - netfilter: add more netlink-based policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: remove unreliable debug code in decode_octstr (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix typo in enum description (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: revisit array resize logic (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-168848]
  - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-168848]
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use unsigned int for monthday bit shift (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-168848]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_flow_table_ip: reset mac header before vlan push (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix for duplicate device in netdev hooks (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: remove locking in nfqnl_get_sk_secctx (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: remove register tracking infrastructure (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: drop obsolete EXPORT_SYMBOLs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't disable bh when acquiring tree lock (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst after dest is removed (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst if dev is going down (Florian Westphal) [RHEL-168848]
  - ipvs: skip ipv6 extension headers for csum checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: revert commit_mutex usage in reset path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_quota: use atomic64_xchg for reset (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: serialize reset with spinlock (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: validate element belonging to interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: fix reset of counters on 32bit archs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add IPV6_TUNNEL to config (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: dedicated slab for flow entry (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: add udp fraglist gro test case (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't gc elements on insert (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use is_leap_year() helper (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct (Florian Westphal) [RHEL-168848]
  - netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto signature (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: remove seqcount_rwlock_t (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: use binary search array in get command (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: translate rbtree to array for binary search (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add .abort_skip_removal flag for set types (Florian Westphal) [RHEL-168848]
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix tracking of connections from localhost (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-168848]
  - netfilter: don't include xt and nftables.h in unrelated subsystems (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: enable icmp clash support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: increase the connection clean up limit to 64 (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reset table validation state on abort (Florian Westphal) [RHEL-168848]
  - netfilter: replace -EEXIST with -EBUSY (Florian Westphal) [RHEL-168848]
  - netfilter: nft_synproxy: avoid possible data-race on update operation (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix range overlap detection (Florian Westphal) [RHEL-168848]
  - audit: add audit_log_nf_skb helper function (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: prefer xfail in case race wasn't triggered (Florian Westphal) [RHEL-168848]
  - netfilter: always set route tuple out ifindex (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix leaked ct in error paths (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: improve UAPI kernel-doc comments (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_srh: fix UAPI kernel-doc comments format (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: add support to object update operation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: update the count if add was skipped (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: rework API to use sk_buff directly (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use tuple address to calculate next hop (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: remove hw_ifidx (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: consolidate xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: move path discovery infrastructure to its own file (Florian Westphal) [RHEL-168848]
  - netfilter: fix typo in nf_conntrack_l4proto.h comment (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: disable 0 value for conntrack_max setting (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: query conntrack state to check for port clash resolution (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_fib.sh: fix spurious test failures (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: fix udpclash tool hang (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: extend offset to 65535 bytes (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: remove unneeded exports (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: remove redundant test for avx feature bit (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: Use csum_replace4() instead of opencoding (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: Use vmalloc_array() to improve code (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: use avx2 algorithm for insertions too (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: remove refcounting in dying list dumping (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: Remove unused functions xt_{in|out}name() (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: tone-down conntrack clash test (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: conntrack_resize.sh: also use udpclash tool (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add conntrack clash resolution test case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Reintroduce shortened deletion notifications (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Drop dead code from fill_*_info routines (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove DCCP protocol support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup_netdev: Move the recursion counter struct netdev_xmit (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup{4, 6}: Move duplication check to task_struct (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: Remove redundant NFCT_ALIGN call (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cgroup: Make it independent from net_cls (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINE (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: Use strscpy() instead of strscpy_pad() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_hashlimit: replace vmalloc calls with kvmalloc (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: cleanup timeout definitions (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: add support for doing AND, OR and XOR directly (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: rename some boolean operation functions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: replace deprecated strncpy with strscpy_pad (Florian Westphal) [RHEL-168848]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175537] {CVE-2026-31474}
  - dmaengine: dw-edma: Add non-LL mode (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add AMD MDB Endpoint Support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_{pause,resume}() callbacks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_tx_status() callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Use rz_lmdesc_setup() to invalidate descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop unnecessary local_irq_save() call (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop goto instruction and label (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop read of CHCTRL register (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: add RZ/{T2H,N2H} support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make register_dma_req() chip-specific (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make error interrupt optional (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add virtual IRQ for interrupt-emulation doorbells (Eder Zulian) [RHEL-172442]
  - dmaengine: dw_edma: correct kernel-doc warnings in <linux/dma/edma.h> (Eder Zulian) [RHEL-172442]
  - New configs in drivers/dma (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add interrupt-emulation hooks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: fix MSI data programming for multi-IRQ case (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: adm: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835-dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: sh: rz-dmac: Make channel irq local (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: uapi: use UAPI types (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Discard pm_runtime_put() return value (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: Remove redundant pm_runtime_mark_last_busy() calls (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: enable compile testing (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use lock guards (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: order includes alphabetically (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix confusing cleanup.h syntax (Eder Zulian) [RHEL-172442]
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: clean up dra7x route allocation error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172442]
  - dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172442]
  - dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172442]
  - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-137412]
  - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-137412]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-137412]
  - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-137412]
  - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-137412]
  - ice: add dpll peer notification for paired SMA and U.FL pins (Michal Schmidt) [RHEL-137412]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-137412]
  - ice: fix missing dpll notifications for SW pins (Michal Schmidt) [RHEL-137412]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Michal Schmidt) [RHEL-137412]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Michal Schmidt) [RHEL-137412]
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Michal Schmidt) [RHEL-137412]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Michal Schmidt) [RHEL-137412]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Michal Schmidt) [RHEL-137412]
  - ice: fix ready bitmap check for non-E822 devices (Michal Schmidt) [RHEL-137412]
  - ice: perform PHY soft reset for E825C ports at initialization (Michal Schmidt) [RHEL-137412]
  - ice: fix timestamp interrupt configuration for E825C (Michal Schmidt) [RHEL-137412]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-137412]
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-137412]
  - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-137412]
  - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [ice] (Michal Schmidt) [RHEL-137412]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [ice] (Michal Schmidt) [RHEL-137412]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [ice] (Michal Schmidt) [RHEL-137412]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [ice] (Michal Schmidt) [RHEL-137412]
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-137412]
  - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-137412]
  - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-137412]
  - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Michal Schmidt) [RHEL-137412]
  - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-137412]
  - ice: fix PTP timestamping broken by SyncE code on E825C (Michal Schmidt) [RHEL-137412]
  - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-137412]
  - ice: use ice_update_eth_stats() for representor stats (Michal Schmidt) [RHEL-137412]
  - ice: fix inverted ready check for VF representors (Michal Schmidt) [RHEL-137412]
  - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-137412]
  - ice: fix rxq info registering in mbuf packets (Michal Schmidt) [RHEL-137412]
  - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-137412]
  - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-137412]
  - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-137412]
  - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-137412]
  - ice: fix missing TX timestamps interrupts on E825 devices (Michal Schmidt) [RHEL-137412]
  - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-137412]
  - ice: reshuffle and group Rx and Tx queue fields by cachelines (Michal Schmidt) [RHEL-137412]
  - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-137412]
  - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-137412]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-137412]
  - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-137412]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-137412]
  - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-137412]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171746]
  - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171457] {CVE-2026-31636}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171437] {CVE-2026-31607}
  - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171420] {CVE-2026-31641}
  - vxlan: validate ND option lengths in vxlan_na_create (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-152728]
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Guillaume Nault) [RHEL-152728]
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_tunnel: spread netdev_lockdep_set_classes() (Guillaume Nault) [RHEL-152728]
  - arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152728]
  - erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152728]
  - ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152728]
  - selftest: packetdrill: add tcp_timestamping_tcp_tx_timestamp_bug.pkt (Paolo Abeni) [RHEL-152718]
  - tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152718]
  - net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152718]
  - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-152718]
  - tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152718]
  - tcp: fix tcp_tso_should_defer() vs large RTT (Paolo Abeni) [RHEL-152718]
  - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() (Paolo Abeni) [RHEL-152718]
  - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Paolo Abeni) [RHEL-152718]
  - wireguard: send: append trailer after expanding head (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit (Toke Høiland-Jørgensen) [RHEL-152735] {CVE-2026-31579}
  - wireguard: allowedips: remove redundant space (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: allowedips: Use kfree_rcu() instead of call_rcu() (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: netlink: generate netlink code (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: generate header with ynl-gen (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move flag enums (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move enum wg_cmd (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: add YNL specification (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: lower .maxattr for WG_CMD_GET_DEVICE (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: convert to split ops (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: use WG_KEY_LEN in policies (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: validate nested arrays in policy (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: enable strict genetlink validation (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: always return valid online CPU in wg_cpumask_choose_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: simplify wg_cpumask_next_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: peer: Replace sockaddr with sockaddr_inet (CKI Backport Bot) [RHEL-152735]
  - ipv6: Add sockaddr_inet unified address structure (CKI Backport Bot) [RHEL-152735]
  - clocksource/drivers/arm_arch_timer_mmio: Prevent driver unbind (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Get rid of acpi_arch_timer_mem_init() (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer_mmio: Switch over to standalone driver (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer: Add standalone MMIO driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: tools: pfrut: fix memory leak and resource leak in pfrut.c (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Move Lenovo Legion S7 15ACH6 quirk to the right section (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Add dependency between iommu and devices (Mark Langsdorf) [RHEL-156420]
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156420]
  - drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156420]
  - ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156420]
  - x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl2.h: ACPI 6.6: RAS2: Update Parameter Block structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156420]
  - APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rearrange declarations in header file (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156420]
  - ACPI: acpi_watchdog: use LIST_HEAD for stack-allocated list (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156420]
  - ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156420]
  - wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156420]
  - acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: make hwerr_data visible for debugging (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: track and log recoverable hardware errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156420]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Fix unused function warnings when CONFIG_IOMMU_API is disabled (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156420]
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156420]
  - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156420]
  - ACPI: support BGRT table on RISC-V (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add RPMI System MSI to GSI mapping (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support to update gsi range (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Create interrupt controller list in sorted order (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Update honor list for RPMI System MSI (Mark Langsdorf) [RHEL-156420]
  - ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156420]
  - ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Add support for DBG2 RISC-V SBI port subtype (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156420]
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156420]
  - ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156420]
  - ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Add support for RISC-V in acpi_iommu_configure_id() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support for RIMT (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156420]
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156420]
  - ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: force native for Lenovo 82K8 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156420]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156420]
  - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Avoid division by zero (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix wait_queue not being removed (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer_impl.h: fix kernel-doc warnings (Jared Kangas) [RHEL-156761]
  - iio: core: Add cleanup.h support for iio_device_claim_*() (Jared Kangas) [RHEL-156761]
  - iio: core: Refactor iio_device_claim_direct() implementation (Jared Kangas) [RHEL-156761]
  - iio: core: Add and export __iio_dev_mode_lock() (Jared Kangas) [RHEL-156761]
  - iio: core: Constify struct configfs_item_operations and configfs_group_operations (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Turn iio_dma_buffer_init() void (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use lockdep for locking annotations (Jared Kangas) [RHEL-156761]
  - iio: core: add separate lockdep class for info_exist_lock (Jared Kangas) [RHEL-156761]
  - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - iio: buffer: use dma_buf_unmap_attachment_unlocked() helper (Jared Kangas) [RHEL-156761]
  - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Jared Kangas) [RHEL-156761]
  - iio: core: Clean up device correctly on iio_device_alloc() failure (Jared Kangas) [RHEL-156761]
  - iio: core: add missing mutex_destroy in iio_dev_release() (Jared Kangas) [RHEL-156761]
  - iio: backend: fix kernel-doc to avoid warnings and ensure consistency (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: enable .get_dma_dev() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: support getting the DMA channel (Jared Kangas) [RHEL-156761]
  - iio: buffer: support getting dma channel from the buffer (Jared Kangas) [RHEL-156761]
  - iio: buffer: document that buffer callback must be context safe (Jared Kangas) [RHEL-156761]
  - iio: buffer: document store_to() callback may be called in any context (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers() calling context (Jared Kangas) [RHEL-156761]
  - iio: buffer: iio_push_to_buffers_with_ts_unaligned() might_sleep() (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers_with_ts_unaligned() may sleep (Jared Kangas) [RHEL-156761]
  - iio: add IIO_ALTCURRENT channel type (Jared Kangas) [RHEL-156761]
  - iio: core: switch info_mask fields to unsigned long to match find_bit helpers (Jared Kangas) [RHEL-156761]
  - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer-cb: drop double initialization of demux list (Jared Kangas) [RHEL-156761]
  - iio: fix iio_push_to_buffers_with_ts() typo (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-lptimer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: adc: stm32-dfsdm: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: core: add ADC delay calibration definition (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix checkpatch.pl warning (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for number of lanes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data alignment (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for filter config (Jared Kangas) [RHEL-156761]
  - iio: fix potential out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: backend: fix out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Jared Kangas) [RHEL-156761]
  - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data source get (Jared Kangas) [RHEL-156761]
  - iio: Adjust internals of handling of direct mode claiming to suit new API. (Jared Kangas) [RHEL-156761]
  - iio: core: Add support for writing 64 bit attrs (Jared Kangas) [RHEL-156761]
  - MAINTAINERS: Add IIO ADC helpers (Jared Kangas) [RHEL-156761]
  - iio: adc: add helpers for parsing ADC nodes (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix docstrings (Jared Kangas) [RHEL-156761]
  - iio: core: make use of simple_write_to_buffer() (Jared Kangas) [RHEL-156761]
  - iio: backend: make sure to NULL terminate stack buffer (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for oversampling (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data size set (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for interface get (Jared Kangas) [RHEL-156761]
  - iio: core: Rework claim and release of direct mode to work with sparse. (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: add devm_iio_dmaengine_buffer_setup_with_handle() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: split requesting DMA channel from allocating buffer (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: export iio_gts_get_total_gain() (Jared Kangas) [RHEL-156761]
  - iio: introduce the FAULT event type (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: add helpers to ease searches of gain_sel and new_gain (Jared Kangas) [RHEL-156761]
  - iio: gts: Simplify available scale table build (Jared Kangas) [RHEL-156761]
  - iio: consumers: ensure read buffers for labels and ext_info are page aligned (Jared Kangas) [RHEL-156761]
  - iio: core: fix doc reference to iio_push_to_buffers_with_ts_unaligned (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer-trigger: Add check for clk_enable() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: document iio_dmaengine_buffer_setup_ext (Jared Kangas) [RHEL-156761]
  - iio: Move __private marking before struct element priv in struct iio_dev (Jared Kangas) [RHEL-156761]
  - iio: events: make IIO_EVENT_CODE macro private (Jared Kangas) [RHEL-156761]
  - iio: Mark iio_dev::priv member with __private (Jared Kangas) [RHEL-156761]
  - iio: Add channel type for attention (Jared Kangas) [RHEL-156761]
  - iio: gts: fix infinite loop for gain_to_scaletables() (Jared Kangas) [RHEL-156761]
  - iio: gts: Fix uninitialized symbol 'ret' (Jared Kangas) [RHEL-156761]
  - iio: backend: extend features (Jared Kangas) [RHEL-156761]
  - iio: events.h: add event identifier macros for differential channel (Jared Kangas) [RHEL-156761]
  - iio: backend: fix wrong pointer passed to IS_ERR() (Jared Kangas) [RHEL-156761]
  - iio: Convert unsigned to unsigned int (Jared Kangas) [RHEL-156761]
  - iio: adc: Convert to IIO_MAP() (Jared Kangas) [RHEL-156761]
  - iio: adc: Constify struct iio_map (Jared Kangas) [RHEL-156761]
  - netdev: add io_uring memory provider info (Davide Caratti) [RHEL-141853]
  - net: add helpers for setting a memory provider on an rx queue (Davide Caratti) [RHEL-141853]
  - net: page_pool: add memory provider helpers (Davide Caratti) [RHEL-141853]
  - net: prepare for non devmem TCP memory providers (Davide Caratti) [RHEL-141853]
  - net: page_pool: add a mp hook to unregister_netdevice* (Davide Caratti) [RHEL-141853]
  - net: page_pool: add callback for mp info printing (Davide Caratti) [RHEL-141853]
  - net: page_pool: create hooks for custom memory providers (Davide Caratti) [RHEL-141853]
  - net: generalise net_iov chunk owners (Davide Caratti) [RHEL-141853]
  - net: prefix devmem specific helpers (Davide Caratti) [RHEL-141853]
  - net: page_pool: don't cast mp param to devmem (Davide Caratti) [RHEL-141853]
  - selftests: drv-net-hw: inject pp_alloc_fail errors in the right place (Davide Caratti) [RHEL-141853]
  - net: page_pool: rename page_pool_is_last_ref() (Davide Caratti) [RHEL-141853]
  - net: page_pool: do not count normal frag allocation in stats (Davide Caratti) [RHEL-141853]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-240.el10]
changelog:
  - s390/syscalls: Add spectre boundary for syscall dispatch table (Ramesh Chhetri) [RHEL-183314]
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179565] {CVE-2026-45998}
  - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179565] {CVE-2026-45998}
  - x86/mce, EDAC/mce_amd: Add new SMCA bank types (Steve Best) [RHEL-100951]
  - x86/mce, EDAC/mce_amd: Update CS bank type naming (Steve Best) [RHEL-100951]
  - x86/mce, EDAC/mce_amd: Reorder SMCA bank type enums (Steve Best) [RHEL-100951]
  - tools/power turbostat: v2026.04.21 (Steve Best) [RHEL-172176]
  - tools/power turbostat: Process HT siblings in CPU order (Steve Best) [RHEL-172176]
  - tools/power turbostat: Show module_id column (Steve Best) [RHEL-172176]
  - tools/power turbostat: Print core_id and apic_id in hex (Steve Best) [RHEL-172176]
  - tools/power turbostat: Cleanup print helper functions (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix --cpu-set 1 regression on HT systems (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix --cpu-set 0 regression on HT systems (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix unrecognized option '-P' (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix AMD RAPL regression on big systems (Steve Best) [RHEL-172176]
  - vfio: replace vfio->device_class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Clean up DMABUFs before disabling function (Cédric Le Goater) [RHEL-149504]
  - vfio: remove dead notifier code (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Require vfio_device_ops.name (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Rename vfio_config_do_rw() to vfio_pci_config_rw_single() and export it (Cédric Le Goater) [RHEL-149504]
  - vfio: unhide vdev->debug_root (Cédric Le Goater) [RHEL-149504]
  - drivers/vfio_pci_core: Change PXD_ORDER check from switch case to if/else block (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Fix double free in dma-buf feature (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Support DMR and GNR-D DSA devices (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Build tests on aarch64 (Cédric Le Goater) [RHEL-149504]
  - vfio/mlx5: Add REINIT support to VFIO_MIG_GET_PRECOPY_INFO (Cédric Le Goater) [RHEL-149504]
  - vfio/mlx5: consider inflight SAVE during PRE_COPY (Cédric Le Goater) [RHEL-149504]
  - net/mlx5: Add IFC bits for migration state (Cédric Le Goater) [RHEL-149504]
  - vfio: Adapt drivers to use the core helper vfio_check_precopy_ioctl (Cédric Le Goater) [RHEL-149504]
  - vfio: Add support for VFIO_DEVICE_FEATURE_MIG_PRECOPY_INFOv2 (Cédric Le Goater) [RHEL-149504]
  - vfio: Define uAPI for re-init initial bytes during the PRE_COPY phase (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set() (Cédric Le Goater) [RHEL-149504]
  - vfio: uapi: fix comment typo (Cédric Le Goater) [RHEL-149504]
  - vfio: mdev: replace mtty_dev->vd_class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio: replace vfio->class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: fix crash in vfio_dma_mapping_mmio_test (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: only build tests on arm64 and x86_64 (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Drop IOMMU mapping size assertions for VFIO_TYPE1_IOMMU (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Add vfio_dma_mapping_mmio_test (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Align BAR mmaps for efficient IOMMU mapping (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Centralize IOMMU mode name definitions (Cédric Le Goater) [RHEL-149504]
  - vfio/mdev: update outdated comment (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Drop <uapi/linux/types.h> includes (Cédric Le Goater) [RHEL-149504]
  - platform/x86/intel/vsec: Add Nova Lake PUNIT support (Steve Best) [RHEL-95636]
  - platform/x86/intel/vsec: Add support for Wildcat Lake (Steve Best) [RHEL-95636]
  - platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe (Steve Best) [RHEL-133094]
  - platform/x86/intel/pmt: Fix kobject memory leak on init failure (Steve Best) [RHEL-133094]
  - platform/x86: intel/pmt: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-133094]
  - nvmet-fcloop: Check remoteport port_state before calling done callback (Aristeu Rozanski) [RHEL-74463]
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free (Aristeu Rozanski) [RHEL-146153]
  - Disable TPM as hwrng source on aarch64 (Štěpán Horáček) [RHEL-69440]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-241.el10]
changelog:
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185115]
  - s390: Revert support for DCACHE_WORD_ACCESS (Rafael Aquini) [RHEL-184095]
  - redhat/configs: Add CONFIG_DIBS configuration option (Mircea Dragan) [RHEL-136142]
  - net/smc: fix missing sk_err when TCP handshake fails (Mircea Dragan) [RHEL-136142]
  - net/smc: avoid early lgr access in smc_clc_wait_msg (Mircea Dragan) [RHEL-136142]
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Mircea Dragan) [RHEL-136142]
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Mircea Dragan) [RHEL-136142]
  - dibs: change dibs_class to a const struct (Mircea Dragan) [RHEL-136142]
  - Revert 'net/smc: Introduce TCP ULP support' (Mircea Dragan) [RHEL-136142]
  - dibs: Remove KMSG_COMPONENT macro (Mircea Dragan) [RHEL-136142]
  - net/smc: fix mismatch between CLC header and proposal (Mircea Dragan) [RHEL-136142]
  - net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully (Mircea Dragan) [RHEL-136142]
  - net/smc: make wr buffer count configurable (Mircea Dragan) [RHEL-136142]
  - dibs: Use subsys_initcall() (Mircea Dragan) [RHEL-136142]
  - dibs: Remove reset of static vars in dibs_init() (Mircea Dragan) [RHEL-136142]
  - smc: rename smc_find_ism_store_rc to reflect broader usage (Mircea Dragan) [RHEL-136142]
  - net/smc: fix general protection fault in __smc_diag_dump (Mircea Dragan) [RHEL-136142]
  - dibs: Check correct variable in dibs_init() (Mircea Dragan) [RHEL-136142]
  - dibs: Move event handling to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move data path to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move query_remote_gid() to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Move vlan support to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Local gid for dibs devices (Mircea Dragan) [RHEL-136142]
  - dibs: Create class dibs (Mircea Dragan) [RHEL-136142]
  - dibs: Move struct device to dibs_dev (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs_client_ops and dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs loopback (Mircea Dragan) [RHEL-136142]
  - dibs: Register ism as dibs device (Mircea Dragan) [RHEL-136142]
  - dibs: Register smc as dibs_client (Mircea Dragan) [RHEL-136142]
  - dibs: Create drivers/dibs (Mircea Dragan) [RHEL-136142]
  - net/smc: Decouple sf and attached send_buf in smc_loopback (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove error handling of unregister_dmb() (Mircea Dragan) [RHEL-136142]
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk(). (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove unused argument from 2 SMC functions (Mircea Dragan) [RHEL-136142]
  - net/smc: Improve log message for devices w/o pnetid (Mircea Dragan) [RHEL-136142]
  - net/smc: Replace use of strncpy on NUL-terminated string with strscpy (Mircea Dragan) [RHEL-136142]
  - net: Introduce netif_xmit_timeout_ms() helper (CKI Backport Bot) [RHEL-180966]
  - queue_api: add subqueue variant netif_subqueue_sent (CKI Backport Bot) [RHEL-180966]
  - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180107] {CVE-2026-46135}
  - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179772] {CVE-2026-43330}
  - Add epoch support for rv and rv-debuginfo packages (John Kacur) [RHEL-163488]
  - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - dm vdo: use GFP_NOIO for blkdev_issue_zeroout on format path (Benjamin Marzinski) [RHEL-113137]
  - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169623]
  - dm cache: fix missing return in invalidate_committed's error path (Benjamin Marzinski) [RHEL-92782]
  - dm vdo: save the formatted metadata to disk (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting logic and initialization (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add synchronous metadata I/O submission helper (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block structure (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block encoding (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add upfront validation for logical size (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting parameters to table line (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add super block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add __counted_by attribute to a number of structures (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: remove redundant TYPE argument from vdo_allocate macro (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: update vdo_allocate_extended to take a field name, no types (Benjamin Marzinski) [RHEL-113137]
  - dm vdo slab-depot: validate old zone count on load (Benjamin Marzinski) [RHEL-113137]
  - dm vdo indexer: validate saved zone count (Benjamin Marzinski) [RHEL-113137]
  - dm cache metadata: fix memory leak on metadata abort retry (Benjamin Marzinski) [RHEL-155190]
  - dm cache: prevent entering passthrough mode after unclean shutdown (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix dirty mapping checking in passthrough mode switching (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix concurrent write failure in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache policy smq: fix missing locks in invalidating cache blocks (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write hang in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write path cache coherency in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix null-deref with concurrent writes in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-168103] {CVE-2024-56603}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - dm-verity-fec: fix corrected block count stat (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: don't stop probing paths at presuspend (Benjamin Marzinski) [RHEL-148451]
  - dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski) [RHEL-154975]
  - dm: use bio_clone_blkg_association (Benjamin Marzinski) [RHEL-154975]
  - dm-unstripe: fix mapping bug when there are multiple targets in a table (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix recalculation in bitmap mode (Benjamin Marzinski) [RHEL-144458]
  - dm: clear cloned request bio pointer when last clone bio completes (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix a typo in the code for write/discard race (Benjamin Marzinski) [RHEL-154975]
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-154975]
  - dm: replace -EEXIST with -EBUSY (Benjamin Marzinski) [RHEL-154975]
  - dm: remove fake timeout to avoid leak request (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix segment info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix cache info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: advance slot index before writing slot (Benjamin Marzinski) [RHEL-154975]
  - dm raid: add documentation for takeover/reshape raid1 -> raid5 table line examples (Benjamin Marzinski) [RHEL-154975]
  - dm: ignore discard return value (Benjamin Marzinski) [RHEL-154975]
  - MAINTAINERS: add Benjamin Marzinski as a device mapper maintainer (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: Simplify the setup_scsi_dh code (Benjamin Marzinski) [RHEL-154975]
  - dm vdo: fix kerneldoc warnings (Benjamin Marzinski) [RHEL-154975]
  - dm-bufio: align write boundary on physical block size (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-136802]
  - dm: test for REQ_ATOMIC in dm_accept_partial_bio() (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove useless mempool (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: disable recursive forward error correction (Benjamin Marzinski) [RHEL-127492] {CVE-2025-71161}
  - dm-ebs: Mark full buffer dirty even on partial write (Benjamin Marzinski) [RHEL-154975]
  - dm mpath: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-154975]
  - dm verity fec: Expose corrected block count via status (Benjamin Marzinski) [RHEL-154975]
  - dm: Don't warn if IMA_DISABLE_HTABLE is not enabled (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove log message with shash driver name (Benjamin Marzinski) [RHEL-154975]
  - dm: sysfs: use sysfs_emit() in dm-sysfs.c (Benjamin Marzinski) [RHEL-154975]
  - dm: remove useless md->nr_zones variable (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: use folio_nr_pages() instead of shift operation (Benjamin Marzinski) [RHEL-136802]
  - dm: fix failure when empty flush's bi_sector points beyond the device end (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: zero cache_info before default init (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: reuse meta_addr in pcache_meta_find_latest (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: allow built-in build and rename flush helper (Benjamin Marzinski) [RHEL-154975]
  - dm raid: use proper md_ro_state enumerators (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: prefer synchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: enable asynchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: rename internal_hash (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: add the "offset" argument (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: allocate the recalculate buffer with kmalloc (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: introduce integrity_kmap and integrity_kunmap (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: replace bvec_kmap_local with kmap_local_page (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: use internal variable for digestsize (Benjamin Marzinski) [RHEL-136802]
  - dm vdo: Update code to use mem_is_zero (Benjamin Marzinski) [RHEL-154975]
  - dm: optimize REQ_PREFLUSH with data when using the linear target (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: use int type to store negative error codes (Benjamin Marzinski) [RHEL-154975]
  - dm: fix "writen"->"written" (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: cleanup: fix coding style report by checkpatch.pl (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: remove ctrl_lock for pcache_cache_segment (Benjamin Marzinski) [RHEL-154975]
  - redhat/configs: Add CONFIG_DM_PCACHE (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: add persistent cache target in device-mapper (Benjamin Marzinski) [RHEL-154975]
  - dm error: mark as DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-154975]
  - dm-vdo: Promote dm-vdo title to title heading (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fixed spelling mistakes in documentation (Benjamin Marzinski) [RHEL-154975]
  - dm bufio: remove redundant __GFP_NOWARN (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: drop a useless argument (Benjamin Marzinski) [RHEL-154975]
  - dm: use vmalloc_array() to simplify code (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: more strlen() drops (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fix typos in delay.rst and vdo-design.rst (Benjamin Marzinski) [RHEL-154975]
  - RDMA/bnxt_re: fix dma_free_coherent() pointer (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to use correct page size for PDE table (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() (Sreekanth Reddy) [RHEL-135357] {CVE-2025-71092}
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Pass correct flag for dma mr creation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix the inline size for GenP7 devices (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix wrong check for CQ coalesc support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add a debugfs entry for CQE coalescing tuning (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a potential memory leak in destroy_gsi_sqp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: improve clarity in ALLOC_PAGE handler (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove non-statistics counters from hw_counters (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add debugfs info entry for device and resource information (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect errno used in function comments (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Avoid GID level QoS update from the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Update sysfs entries with appropriate data (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Call strscpy() with correct size argument (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove unnecessary condition checks (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Use firmware provided message timeout value (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Initialize fw with roce_mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for flow create/destroy (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for mirror vnic (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for unique GID (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor stats context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor hw context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add data structures for RoCE mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Enhance a log message when bnxt_re_register_netdev fails (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Delete always true SGID table check (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Report udp source port for flow_label in bnxt_re_query_qp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE related hardware counters update (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Optimize bnxt_qplib_get_dev_attr function (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE Driver Dynamic Debug for HWRM's (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Show srq_limit in fill_res_srq_entry hook (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to initialize the PBL array (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a possible memory leak in the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to do SRQ armena by default (Sreekanth Reddy) [RHEL-135357]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-242.el10]
changelog:
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179758] {CVE-2026-43414}
  - sched/fair: Fix wakeup_preempt_fair() for not waking up task (Phil Auld) [RHEL-174703]
  - sched/fair: Fix overflow in vruntime_eligible() (Phil Auld) [RHEL-174703]
  - sched/fair: Clear rel_deadline when initializing forked entities (Phil Auld) [RHEL-174703]
  - sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue (Phil Auld) [RHEL-174703]
  - sched/deadline: Use revised wakeup rule for dl_server (Phil Auld) [RHEL-174703]
  - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() (Phil Auld) [RHEL-174703]
  - sched/debug: Fix avg_vruntime() usage (Phil Auld) [RHEL-174703]
  - sched/fair: Fix zero_vruntime tracking fix (Phil Auld) [RHEL-174703] {CVE-2026-43323}
  - NFS: write_completion: dereference loop-local req, not hdr->req (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Report whether fh_key was actually updated (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: prevent out-of-bounds read in __cache_seq_start() (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix overlapping extents returned for pNFS LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix use of uninitialized imap in xfs_fs_map_blocks error path (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Fix infinite loop in layout state revocation (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: start cache request seqno at 1 to fix netlink GET_REQS (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on COPY in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on CLONE in presense of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix file change detection in CB_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - net/handshake: Add new parameter 'HANDSHAKE_A_ACCEPT_KEYRING' (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix RCU dereference of cl_xprt in nfs_compare_super_address (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove redundant __private attribute from nfs_page_class (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.2: fix CLONE/COPY attrs in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix writeback in presence of errors (Olga Kornievskaia) [RHEL-171581]
  - nfs: use memcpy_and_pad in decode_fh (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.1: Apply session size limits on clone path (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: retry GETATTR if GET_DIR_DELEGATION failed (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix RENAME attr in presence of directory delegations (Olga Kornievskaia) [RHEL-171581]
  - pnfs/flexfiles: validate ds_versions_cnt is non-zero (Olga Kornievskaia) [RHEL-171581]
  - NFS/blocklayout: print each device used for SCSI layouts (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Post receive buffers after RPC completion (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Scale receive batch size with credit window (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Replace rpcrdma_mr_seg with xdr_buf cursor (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decouple frwr_wp_create from frwr_map (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Avoid 250 ms delay on backlog wakeup (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close sendctx get/put race that can block a transport (Olga Kornievskaia) [RHEL-171581]
  - nfs: update inode ctime after removexattr operation (Olga Kornievskaia) [RHEL-171581]
  - nfs: fix utimensat() for atime with delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-171581]
  - NFSv4/pnfs: If the server is down, retry the layout returns on reboot (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfsxdr (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfs3xdr (Olga Kornievskaia) [RHEL-171581]
  - NFSD: convert callback RPC program to per-net namespace (Olga Kornievskaia) [RHEL-171581]
  - NFSD: use per-operation statidx for callback procedures (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Use contiguous pages for RDMA Read sink buffers (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Add svc_rqst_page_release() helper (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: xdr.h: fix all kernel-doc warnings (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Factor out WR chain linking into helper (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add Write chunk WRs to the RPC's Send WR chain (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device in Receive paths (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add fair queuing for Send Queue access (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Optimize rq_respages allocation in svc_alloc_arg (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Track consumed rq_pages entries (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Handle NULL entries in svc_rqst_release_pages (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Allocate a separate Reply page array (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Tighten bounds checking in svc_rqst_replace_page (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Sign filehandles (Olga Kornievskaia) [RHEL-171581]
  - NFSD/export: Add sign_fh export option (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a key for signing filehandles (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use dynamic allocation for oversized NFSv4.0 replay cache (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split cache_detail queue into request and reader lists (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_wait from global to per-cache-detail waitqueue (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_lock from global spinlock to per-cache-detail lock (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Add XPT flags missing from SVC_XPRT_FLAG_LIST (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove dead code from fs/lockd/xdr4.c (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove C macros that are no longer used (Olga Kornievskaia) [RHEL-171581]
  - lockd: Add LOCKD_SHARE_SVID constant for DOS sharing mode (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 FREE_ALL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NM_LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNSHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Prepare share helpers for xdrgen conversion (Olga Kornievskaia) [RHEL-171581]
  - lockd: Hoist file_lock init out of nlm4svc_decode_shareargs() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Convert server-side undefined procedures to xdrgen (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SM_NOTIFY procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Refactor nlm4svc_callback() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NULL procedure (Olga Kornievskaia) [RHEL-171581]
  - Documentation: Add the RPC language description of NLM version 4 (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Enforce timeout on layout recall and integrate lease manager fencing (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Fix compilation error (`make W=1`) when dprintk() is no-op (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Kill RPC_IFDEBUG() (Olga Kornievskaia) [RHEL-171581]
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate svc_version definitions to XDR layer (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move nlm4svc_set_file_lock_range() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Make linux/lockd/nlm.h an internal header (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove lockd/debug.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate include/linux/lockd/lockd.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move share.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr4.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - NFS: Use nlmclnt_shutdown_rpc_clnt() to safely shut down NLM (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate nlmsvc_unlock API declarations (Olga Kornievskaia) [RHEL-171581]
  - lockd: Have nlm_fopen() return errno values (Olga Kornievskaia) [RHEL-171581]
  - lockd: Introduce nlm__int__deadlock (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate and rename nlm_drop_reply (Olga Kornievskaia) [RHEL-171581]
  - lockd: Simplify cast_status() in svcproc.c (Olga Kornievskaia) [RHEL-171581]
  - nfsd: remove NFSD_V4_DELEG_TIMESTAMPS Kconfig option (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add a runtime switch for disabling delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Replace KUnit tests for memcmp() with KUNIT_EXPECT_MEMEQ_MSG() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Track SCSI Persistent Registration Fencing per Client with xarray (Olga Kornievskaia) [RHEL-171581]
  - sunrpc/cache: improve RCU safety in cache_list walking. (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: move rq_cachetype into struct nfsd_thread_local_info (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: add svc_rqst->rq_private pointer and remove rq_lease_breaker (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: fix cache_request leak in cache_release (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31400}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31403}
  - nfsd: switch purge_old() to use start_removing_noperm() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix NFS KConfig typos (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decrement re_receiving on the early exit paths (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43469}
  - nfsd: report the requested maximum number of threads instead of number running (Olga Kornievskaia) [RHEL-171581]
  - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43470}
  - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43394}
  - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-23297}
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Olga Kornievskaia) [RHEL-171581]
  - nfs: nfs4proc: Convert comma to semicolon (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Change list definition method (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: rpc_debug and others are defined even if CONFIG_SUNRPC_DEBUG unset (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: limit lease period in nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: pass lease period in seconds to nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - fs/nfs: Fix readdir slow-start regression (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix delayed delegation return handling (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify error handling in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: fold nfs_abort_delegation_return into nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the delegation == NULL check in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use bool for the issync argument to nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from ->return_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from nfs4_inode_make_writeable (Olga Kornievskaia) [RHEL-171581]
  - NFS: Merge CONFIG_NFS_V4_1 with CONFIG_NFS_V4 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a way to disable NFS v4.0 via KConfig (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFS_V4_0 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move sequence slot operations into minorversion operations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Pass a struct nfs_client to nfs4_init_sequence() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move NFS v4.0 pathdown recovery into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_init_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_shutdown_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Make the various NFS v4.0 operations static again (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move the NFS v4.0 minor version ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_mig_recovery_ops to nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_state_renewal_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_nograce_recovery_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_reboot_recovery_ops into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_call_sync_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - exportfs: clarify the documentation of open()/permission() expotrfs ops (Olga Kornievskaia) [RHEL-171581]
  - nfsd: do not allow exporting of special kernel filesystems (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX ACL file attributes to SUPPATTR bitmasks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX draft ACL support to the NFSv4 SETATTR operation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for POSIX draft ACLs for file creation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for XDR decoding POSIX draft ACLs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Refactor nfsd_setattr()'s ACL error reporting (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Do not allow NFSv4 (N)VERIFY to check POSIX ACL attributes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_access_acl (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_default_acl (Olga Kornievskaia) [RHEL-171581]
  - lsm,nfs: fix memory leak of lsm_context (Olga Kornievskaia) [RHEL-171581]
  - lsm: lsm_context in security_dentry_init_security (Olga Kornievskaia) [RHEL-171581]
  - lsm: use lsm_context in security_inode_getsecctx (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform_scope (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform (Olga Kornievskaia) [RHEL-171581]
  - Add RPC language definition of NFSv4 POSIX ACL extension (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a Kconfig setting to enable support for NFSv4 POSIX ACLs (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFSD_V4_POSIX_ACLS (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement pass-through lines in specifications (Olga Kornievskaia) [RHEL-171581]
  - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add controls to set the minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - nfsd: adjust number of running nfsd threads based on activity (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allow svc_recv() to return -ETIMEDOUT and -EBUSY (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split new thread creation into a separate function (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: introduce the concept of a minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: track the max number of requested threads in a pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: remove special handling of NULL pool from svc_start/stop_kthreads() (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split svc_set_num_threads() into two functions (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: use bvec-based RDMA read/write API (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Add enum value validation to generated decoders (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Emit a max_arg_sz macro (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Extend error reporting to AST transformation phase (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Improve parse error reporting (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Remove inclusion of nlm4.h header (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id (Olga Kornievskaia) [RHEL-171581]
  - nfsd: never defer requests during idmap lookup (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Initialize data pointer for zero-length items (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix setting FMODE_NOCMTIME in nfs4_open_delegation (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement short (16-bit) integer types (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use workqueue enable/disable APIs for v4_end_grace sync (Olga Kornievskaia) [RHEL-171581]
  - NFS: NFSERR_INVAL is not defined by NFSv2 (Olga Kornievskaia) [RHEL-171581]
  - nfsd: prefix notification in nfsd4_finalize_deleg_timestamps() with "nfsd: " (Olga Kornievskaia) [RHEL-171581]
  - locks: ensure vfs_test_lock() never returns FILE_LOCK_DEFERRED (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Generate "if" instead of "switch" for boolean union enumerators (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add instructions on how to deal with xdrgen files (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Clean up nfsd4_check_open_attributes() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: switch nfs_local_do_read and nfs_local_do_write to return void (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: remove -EAGAIN handling in nfs_local_doio() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Cleanup the nfs_local_pgio_done() parameters (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Handle short writes by retrying (Olga Kornievskaia) [RHEL-171581]
  - NFS: make nfs_mark_return_unreferenced_delegations less aggressive (Olga Kornievskaia) [RHEL-171581]
  - NFS: return delegations from the end of a LRU when over the watermark (Olga Kornievskaia) [RHEL-171581]
  - NFS: add a separate delegation return list (Olga Kornievskaia) [RHEL-171581]
  - NFS: reformat nfs_mark_delegation_revoked (Olga Kornievskaia) [RHEL-171581]
  - NFS: use a local RCU critical section in nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use refcount_inc_not_zero nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: don't consume a delegation reference in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: take a delegation reference in nfs4_get_valid_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify the detached delegation check in update_open_stateid (Olga Kornievskaia) [RHEL-171581]
  - NFS: move the deleg_cur check out of nfs_detach_delegation_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: return bool from nfs_detach_delegation{,_locked} (Olga Kornievskaia) [RHEL-171581]
  - NFS: move delegation lookup into can_open_delegated (Olga Kornievskaia) [RHEL-171581]
  - NFS: rewrite nfs_delegations_present in terms of nr_active_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_free_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: open code nfs_delegation_need_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove NFS_DELEGATION_INODE_FREEING (Olga Kornievskaia) [RHEL-171581]
  - NFS: drop the _locked postfix from nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: assert rcu_read_lock is held in nfs_start_delegation_return_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_inode_detach_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the NULL inode check in nfs4_inode_return_delegation_on_close (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_all_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_unused_delegation_types (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove __nfs_client_for_each_server (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Mark struct export_operations functions at kernel-doc (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Fix kernel-doc output for get_name() (Olga Kornievskaia) [RHEL-171581]
  - docs: exportfs: Use source code struct documentation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Don't immediately return directory delegations when disabled (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.x: Directory delegations don't require any state recovery (Olga Kornievskaia) [RHEL-171581]
  - nfs: unify security_inode_listsecurity() calls (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Don't free slots prematurely if requesting a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Fix nfs_clear_verifier_delegated() for delegated directories (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix directory delegation verifier checks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: net ref data still needs to be freed even if net hasn't startup (Olga Kornievskaia) [RHEL-171581]
  - nfsd: provide locking for v4_end_grace (Olga Kornievskaia) [RHEL-171581] {CVE-2026-22980}
  - NFSD: Remove NFSERR_EAGAIN (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use ATTR_DELEG in nfsd4_finalize_deleg_timestamps() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: NFSv4 file creation neglects setting ACL (Olga Kornievskaia) [RHEL-171581] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Handle NFS4ERR_NOTSUPP errors for directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Separate lists (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Wrap shell snippets in literal code blocks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add toctree entry for NFSD IO modes docs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: add Documentation/filesystems/nfs/nfsd-io-modes.rst (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS WRITE (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix up the automount fs_context to use the correct cred (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add trace point for SCSI fencing operation. (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a module option to disable directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Shortcut lookup revalidations if we have a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation during RENAME (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation on ACCESS, CREATE, and UNLINK (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add support for sending GDD_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - nfsd: Use MD5 library instead of crypto_shash (Olga Kornievskaia) [RHEL-171581]
  - nfsd: stop pretending that we cache the SEQUENCE reply. (Olga Kornievskaia) [RHEL-171581]
  - NFS: nfsd-maintainer-entry-profile: Inline function name prefixes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a subsystem policy document (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allocate a separate bvec array for socket sends (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Improve "fragment too large" warning (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS READ (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Relocate the xdr_reserve_space_vec() call site (Olga Kornievskaia) [RHEL-171581]
  - NFSD: pass nfsd_file to nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Support multiple extents per LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Introduce layout content structure (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Increase the server's default RPC/RDMA credit grant (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Update comment documenting unsupported fattr4 attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: delete unreachable confusing code in nfs4_open_delegation() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add array bounds-checking in nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - nfsd: switch the default for NFSD_LEGACY_CLIENT_TRACKING to "n" (Olga Kornievskaia) [RHEL-171581]
  - nfsd: change nfs4_client_to_reclaim() to allocate data (Olga Kornievskaia) [RHEL-171581]
  - nfsd: move name lookup out of nfsd4_list_rec_dir() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Define actions for the new time_deleg FATTR4 attributes (Olga Kornievskaia) [RHEL-171581] {CVE-2025-40326}
  - NFSD: Allow layoutcommit during grace period (Olga Kornievskaia) [RHEL-171581]
  - fs: lift the FMODE_NOCMTIME check into file_update_time_flags (Olga Kornievskaia) [RHEL-171581]
  - fs: refactor file timestamp update logic (Olga Kornievskaia) [RHEL-171581]
  - nfsd: freeze c/mtime updates with outstanding WRITE_ATTRS delegation (Olga Kornievskaia) [RHEL-171581]
  - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172775] {CVE-2026-43056}
  - bonding: 3ad: Add support for 1600G speed (Kamal Heib) [RHEL-165176]
  - net: ethtool: Add support for 1600Gbps speed (Kamal Heib) [RHEL-165176]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-243.el10]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-178260]
  - nvme: make nvme_add_ns{_head}_cdev return void (Utkarsh Singh) [RHEL-186079]
  - nvme: fix crash and memory leak during invalid cdev teardown (Utkarsh Singh) [RHEL-186079]
  - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-185104]
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185661]
  - net/sched: fix pedit partial COW leading to page cache corruption (CKI Backport Bot) [RHEL-177381] {CVE-2026-46331}
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-176465] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-176465]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180700] {CVE-2026-31530}
  - s390/uv: Fix comment of uv_find_secret() function (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Fix memory leak with CCA cards used as accelerator (Mircea Dragan) [RHEL-136440]
  - crypto: s390/paes - Refuse clear key material by default (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Support new xflag PKEY_XFLAG_NOCLEARKEY (Mircea Dragan) [RHEL-136440]
  - crypto: skcipher - Add new helper function crypto_skcipher_tested (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Select crypto engine in Kconfig when PAES is chosen (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Extend protected key conversion retry loop (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Rework protected key AES for true asynch support (Mircea Dragan) [RHEL-136440]
  - s390/cpacf: Rework cpacf_pcc() to return condition code (Mircea Dragan) [RHEL-136440]
  - s390/pkey/crypto: Introduce xflags param for pkey in-kernel API (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Provide and pass xflags within pkey and zcrypt layers (Mircea Dragan) [RHEL-136440]
  - s390/uv: Remove uv_get_secret_metadata function (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Use preallocated memory for retrieve of UV secret metadata (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework EP11 pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework CCA pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 misc functions to use cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Locate ep11_domain_query_info onto the stack instead of kmalloc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Propagate xflags argument with cca_get_info() (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca misc functions kmallocs to use the cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove CCA and EP11 card and domain info caches (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove unused functions from cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for ep11 misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework zcrypt function zcrypt_device_status_mask_ext (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for ep11 misc functions (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for cca misc functions (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: New xflag parameter (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Avoid alloc and copy of ep11 targets if kernelspace cprb (Mircea Dragan) [RHEL-136440]
  - s390/ap: Introduce ap message buffer pool (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: Rework AP message buffer allocation (Mircea Dragan) [RHEL-136440]
  - s390/ap: Move response_type struct into ap_msg struct (Mircea Dragan) [RHEL-136440]
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179311] {CVE-2026-46090}
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add capability that forwards operation exceptions (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136477]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136477]
  - rhashtable: Fix rhashtable_try_insert test (Herton R. Krzesinski) [RHEL-115002]
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock (Herton R. Krzesinski) [RHEL-115002]


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Julien Rische <jrische@redhat.com> - 1.21.3-11
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171587 RHEL-171595


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.12-1
changelog:
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - Translated using Weblate (Czech) (jsefler@redhat.com)
  - fix(test): Fix unit tests of "sub-man status" (jhnidek@redhat.com)
  - RHEL-126153: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - fix: Print list of environments without --set/--list (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix(ci): Fixed integration tests of syspurpose (jhnidek@redhat.com)
  - chore: Removed deprecated information from setup.py (jhnidek@redhat.com)
  - chore(ci): Specify permissions for Actions (mhorky@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - docs: added missing gettext building dependency (manuelcanorojo@gmail.com)
  - docs: improved man content related to subscription-manager environment
    variables for proxy configuration (manuelcanorojo@gmail.com)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix gobject python package name of sles (suttner@atix.de)
  - Fix SLES build on OBS (suttner@atix.de)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.13-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - chore: Make black-26.* happy again (./) (jhnidek@redhat.com)
  - chore: Update black to 26.3.1 in GitHub action yml file (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./integration-tests) (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./test) (jhnidek@redhat.com)
  - test: Fixed one unit test related to inotify (jhnidek@redhat.com)
  - chore: Make black-26.* happy again (./src) (jhnidek@redhat.com)
  - chore: style formatting fixes in rhsmcertd worker (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when auto-registration is terminated early
    (jajerome@redhat.com)
  - fix: updated rhsmcertd to detect when system is already registered
    (jajerome@redhat.com)
  - chore(deps): bump black from 24.3.0 to 26.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore(deps): bump black from 24.3.0 to 26.3.1 in /integration-tests
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: allow system to be registered with broken insights-client
    (jlocash@redhat.com)
  - fix: skip package profile upload when disabled in config
    (jajerome@redhat.com)
  - fix(unit-tests): mock isdir so rhsm_debug tests are env agnostic
    (csnyder@redhat.com)
  - ci: bump actions/upload-artifact from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - fix: Handle non-existence of /var/cache/cloud-what gracefully
    (jhnidek@redhat.com)
  - fix(unit-tests): Fixed unit tests for rhsm-debug (jhnidek@redhat.com)
  - feat: Add /var/cache/cloud-what/ to sos-report (jhnidek@redhat.com)


author: Jason Jerome <jajerome@redhat.com> 1.30.14-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Automatic commit of package [subscription-manager] release [1.30.13-1].
    (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.15-1
changelog:
  - chore: better definition of IP address of AWS IMDS (jhnidek@redhat.com)
  - Fix package upload during initial register (suttner@atix.de)
  - feat(pqc): update crypto capabilities from 'refresh' command
    (jlocash@redhat.com)
  - feat(pqc): update crypto capabilities from 'identity --regenerate' command
    (jlocash@redhat.com)
  - style: fix flake8 lint error (jlocash@redhat.com)
  - feat(pqc): update crypto capabilities in candlepin from rhsmcertd-worker
    (jlocash@redhat.com)
  - feat(pqc): implement cache for crypto capabilities (jlocash@redhat.com)
  - fix: Invalidate and update CurrentOwnerCache when owner change is detected
    (csnyder@redhat.com)
  - chore: Added more debug prints about closing connections (jhnidek@redhat.com)
  - fix: Set timeout before trying to close TLS connection (jhnidek@redhat.com)
  - fix(pqc): update warning to indicate fallback (jlocash@redhat.com)
  - fix(pqc): raise RuntimeError when get_signature_algorithms or
    get_public_key_algorithms throw (jlocash@redhat.com)
  - feat(pqc): print warning when setting invalid `certificate_algorithms` value
    (jlocash@redhat.com)
  - docs: Document `rhsm.certificate_algorithms` config option in rhsm.conf man
    pages (jlocash@redhat.com)
  - fix: drop __smoke_test__ and __main__ from pqc.py (jlocash@redhat.com)
  - style: fix linting error in connection.py (jlocash@redhat.com)
  - test: fix broken tests for registerConsumer (jlocash@redhat.com)
  - feat(pqc): Use C bindings to retrieve public-key and signature algorithms in
    pqc.py (jlocash@redhat.com)
  - feat: POC: Add support for PQC (jhnidek@redhat.com)
  - Remove cron RPM requirement on suse systems (suttner@atix.de)
  - test: Added C unit tests of _certificate.so (jhnidek@redhat.com)
  - feat: Added .pyi file for certificate.c (jhnidek@redhat.com)
  - chore: Not all .py* files should be ignored (jhnidek@redhat.com)
  - test: Created unit tests for certificate.c (jhnidek@redhat.com)
  - feat: Added 2 methods for listing crypto algorithms (jhnidek@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-13
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161334)


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Than Ngo <than@redhat.com> - 1.1.19-13
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    Resolves: RHEL-86305


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Paul Evans <pevans@redhat.com> - 0.32-16
changelog:
  - lsscsi: Fixes for SBP (Firewire) host in transport_h_init() (RHEL-48228)
  - lsscsi: Change default output trailing space after each device entry (RHEL-70371)
  - lsscsi: Transport type FC and FCOE output inconsistencies (RHEL-155569)
  - lsscsi: Device name spacing before major:minor dev dev names exceeds 9 chars (RHEL-157252)


author: Than Ngo <than@redhat.com> - 1.7.17-1
changelog:
  - Resolves: RHEL-115186, Enhance lsvpd to update VPD for Nvidia OTS Adapters
  - Resolves: RHEL-102468, Update to 1.7.17


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Patsy Griffin <pfrankli@redhat.com> - 6.06-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz (RHEL-101696)
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Patsy Griffin <patsy@redhat.com> - 6.06-13
changelog:
  - suffixes(7): Add zstd format to the suffixes file core(5): Document dump
    file format change from lz4 format to zstd format


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-4.el10]
changelog:
  - spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
  - tests: py: Update payload records (Phil Sutter) [RHEL-128553]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
  - tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
  - netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
  - expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
  - intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - Rebase to OpenSC 0.27.1 fixing outstanding security reports and bring in new PQC features (RHEL-151598)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163365
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155178
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164740
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166239
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166223
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166191
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166207


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
changelog:
  - Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
    Related: RHEL-92932
  - Add missing NULL check for server key generation in ML-KEM hybrids
    Resolves: RHEL-168106


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.81-1
changelog:
  - Update to latest upstream version with better support for latest OSes,
    closes rhbz#2090942
  - Remove 'which' dependency, closes rhbz#2111531
  - Add support for detecting EFI shell binary (shell.efi), closes rhbz#2101953
  - Add support for Win 11 on ARM 64 systems


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.9.0-4
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Paul Howarth <paul@city-fan.org> - 1:0.240-1
changelog:
  - Update to 0.240
    - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
      deprecated, as ' isn't allowed as package separator in an upcoming version
      of Perl (GH#13)


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Than Ngo <than@redhat.com> - 1.3.11-4
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  - Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Fraser Tweedale <ftweedal@redhat.com> - 48.0.0-1
changelog:
  - Update to 48.0.0, resolves RHEL-172409
  - Fix AES-GCM with FIPS provider version mismatch, resolves RHEL-173746


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: John Kacur <jkacur@redhat.com> - 0.7.4-1
changelog:
  - Rebase to upstream version 0.7.4
  - Convert to pyproject-based build using pyproject.toml
  - Remove python3-six dependency (no longer needed)
  - Remove distutils patch (no longer needed with pyproject build)
  Resolves: RHEL-114904


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Miro Hrončok <mhroncok@redhat.com> - 2.32.4-1
changelog:
  - Update to 2.32.4
  - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
  Resolves: RHEL-105460


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-24
changelog:
  - Add support for %autosetup -C (RHEL-141269)
  - Add support for database parking (RHEL-126405)
  - Make syslog plugin actually useful and also required (RHEL-155272)
  - Require rpm-plugin-audit instead of just recommending (RHEL-139071)
  - Fix buffer overruns with long language strings (RHEL-169755)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.19-3
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-142737, RHEL-137215, RHEL-142755


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.19-4
changelog:
  - Security fix for CVE-2026-44431
  - Security fix for CVE-2026-44432
  Resolves: RHEL-184817, RHEL-185121


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Jiri Hnidek <jhnidek@redhat.com> 8-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Various fixes in state management (tomatus777@gmail.com)
  - Upgrade to Patternfly 6 (tomatus777@gmail.com)
  - make eslint happy (tomatus777@gmail.com)
  - test: mock-insights should have /host_exists endpoint (pkoprda@redhat.com)
  - build: switch to esbuild (tomatus777@gmail.com)
  - build: fix installation of sub-man with newer Fedora (ptoscano@redhat.com)
  - refactor: Remove system purpose status (pkoprda@redhat.com)
  - refactor: Display status consistent with subscription-manager
    (pkoprda@redhat.com)
  - refactor: Simplify displaying of installed products (pkoprda@redhat.com)
  - Stop using deprecated translatable for html (jvanderwaa@redhat.com)


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Convert license headers to SPDX format
  - Bug fixes and translation updates


  - Resolves: rhbz#2376500


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937

    (tomatus777@tomatus.cz)


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Vladislav Dronov <vdronov@redhat.com> - 6.17-10
changelog:
  - Update to the upstream v6.17 @ e8da3cdc (RHEL-176338)
  - Handle new radiacode entropy source
  - Build with the updated jitterentropy v3.7.0 library
  - Drop the older i686 force-PIC fix


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-5
changelog:
  - Resolves: RHEL-169137 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling


author: Michal Ruprich <mruprich@redhat.com> - 3.4.4-1
changelog:
  - Resolves: RHEL-186589 - Rebase rsync to version 3.4.4
  - Resolves: RHEL-174931 - TOCTOU symlink race condition (CVE-2026-29518)
  - Resolves: RHEL-174947 - Memory disclosure via int overflow (CVE-2026-43618)


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Jakub Martisko <jamartis@redhat.com> - 4.9-5
changelog:
  - lib/dfa.c: Increase the maximum size of the transitions table
  - After changes introduced between sed 4.2 and 4.4, some regexps
    started to hit the table size limits. This lead to repeated deletion
    and rebuilding of the table, leading to massive performance drops.
    While the core issue is still present, this change should at least
    help by moving the threshold of the regexp complexity that triggers the 
    table rebuilds.
  - Resolves: RHEL-144027


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.16-1
changelog:
  - Allow sshd-session inherit limits from its parent sshd process
  Resolves: RHEL-136673
  - Revert "Allow sshd-session inherit limits from its parent process"
  Resolves: RHEL-136673
  - Allow tlshd write generic certificates
  Resolves: RHEL-123737
  - Allow systemd-hostnamed to create its Varlink socket
  Resolves: RHEL-139385
  - Update gpg_role() interface with unix_stream_socket permissions
  Resolves: RHEL-128555
  - Label /etc/aliases.cdb with etc_aliases_t
  Resolves: RHEL-109976
  - Add aliases.lmdb to mta_filetrans_named_content()
  Resolves: RHEL-140884
  - Update policy for bootupd
  Resolves: RHEL-141391


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
changelog:
  - Allow rhsmcertd read anaconda run files
  Resolves: RHEL-141391
  - Allow mdadm to use CAP_BPF during RAID monitoring
  Resolves: RHEL-135765
  - Allow mdadm the CAP_SYS_PTRACE capability
  Resolves: RHEL-135765
  - Allow staff and sysadm execute iotop using sudo
  Resolves: RHEL-134940
  - Allow kernel_t to read/write all domains' pipes
  Resolves: RHEL-124442
  - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
  Resolves: RHEL-148107


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
changelog:
  - Allow NetworkManager list bpf directories
  Resolves: RHEL-142171
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  Resolves: RHEL-114886
  - Allow pkcsslotd read files in /proc and /sys
  Resolves: RHEL-130812
  - Allow pkcsslotd map its private tmpfs files
  Resolves: RHEL-130812
  - Allow tlshd communication to unconfined_t over a tcp socket
  Resolves: RHEL-125106
  - Label /run/insights-client.ppid with insights_client_run_t
  Resolves: RHEL-146687
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-140760
  - Allow tlshd write generic certificate dirs
  Resolves: RHEL-127023
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121479
  - Allow plasma login manager stop login services
  Resolves: RHEL-140911
  - Rebuild selinux policy after installation of the extra package
  Resolves: RHEL-135875
  Resolves: RHEL-143926
  - Move triggerin scriptlets to the parent packages
  Resolves: RHEL-141813
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  Resolves: RHEL-141813


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.19-1
changelog:
  - Label the greetd login manager framework as a display manager
  Resolves: RHEL-147638
  - Allow sysadm user connect to lvm over a unix stream socket
  Resolves: RHEL-153729
  - Allow virtqemud map vhost net device
  Resolves: RHEL-141541
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  Resolves: RHEL-69913
  - Allow virtqemud_t get priority of a svirt_t process
  Resolves: RHEL-69920
  - Dontaudit tlshd write generic certificate dirs
  Resolves: RHEL-152619
  - Allow redis_t to create netlink_rdma_socket
  Resolves: RHEL-154814
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-140212


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.20-1
changelog:
  - Do not backslash-escape underscores in file context specifications
  Resolves: RHEL-140921
  - Policy for go-fdo-server
  Resolves: RHEL-145754
  - Allow iptables_t read state of some processes
  Resolves: RHEL-164304
  - Allow iptables read firewalld process state
  Resolves: RHEL-164304
  - Allow systemd-machined read virtd process state
  Resolves: RHEL-164304
  - Allow systemd-machined read svirt process state
  Resolves: RHEL-164304
  - Label /dev/HID-SENSOR-.* with hid_sensor_device_t
  Resolves: RHEL-168417
  - Allow NetworkManager_dispatcher_nvme_t check status of systemd services
  Resolves: RHEL-164864
  - Dontaudit setroubleshootd read root's home files like .rpmmacros
  Resolves: RHEL-142548
  - Allow systemd-tmpfiles to adjust resource limits
  Resolves: RHEL-139855


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.21-1
changelog:
  - Allow sys_resource on execution of generic executables conditionally
  Resolves: RHEL-141858
  - Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
  Resolves: RHEL-156457
  - Label /run/coreos with coreos_installer_var_run_t
  Resolves: RHEL-156456
  - Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
  Resolves: RHEL-156456
  - Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot
  Resolves: RHEL-170267
  - Remove 14 permissive domains
  Resolves: RHEL-166039
  - Do not audit iptables attempts to read other process state
  Resolves: RHEL-164304


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.22-1
changelog:
  - Allow virtqemud execute kmod in the kmod domain
  Resolves: RHEL-99904
  - Allow qatlib map kernel modules
  Resolves: RHEL-133797
  - Allow init nnp domain transition do dirsrv_t and dirsrv_snmp_t
  Resolves: RHEL-167849
  - Allow go-fdo-server to read system information
  Resolves: RHEL-145754


author: Veronika Syncakova <vsyncako@redhat.com> - 42.1.23-1
changelog:
  - Bring back execmem permission for svirt_tcg_t
  - Leave content of virtqemud_use_execmem empty
  - Dontaudit libvirt-daemons execmem
  - Allow virtstoraged to setattr fixed disk devices
  Resolves: RHEL-44901


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.24-1
changelog:
  - Apply the systemd system generator template to the kdump-dep generator
  Resolves: RHEL-155963
  - Allow staff user mounton /var/lib dirs
  Resolves: RHEL-171123
  - Allow staff user read nsfs files
  Resolves: RHEL-171123
  - Allow staff user additional sandboxing permissions
  Resolves: RHEL-171123
  - Allow staff_sudo_t read PID1's process state
  Resolves: RHEL-171123
  - Allow staff_sudo_t read logind sessions files
  Resolves: RHEL-171123
  - Allow staff user delete thump_tmp_t files
  Resolves: RHEL-171123
  - Allow staff user connect to systemd-logind over a unix stream socket
  Resolves: RHEL-171123
  - Allow staff user mount /proc
  Resolves: RHEL-171123
  - Support confined users usage of bubblewrap
  Resolves: RHEL-171123
  - Allow staff role read/write cockpit-session unix stream sockets
  Resolves: RHEL-171123
  - Allow some confined users read and map generic log files
  Resolves: RHEL-171123
  - Add files_mounton_generic_tmp_dirs() interface
  Resolves: RHEL-171123
  - Apply the systemd system generator template to the anaconda generator
  Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2417835
  - Support new sanlock features - using libdm and SG_IO
  Resolves: RHEL-171586
  - Allow pcm-sensor-server the sys_admin capability
  Resolves: RHEL-171325
  - Allow the kernel to execute also special files
  Resolves: https://redhat.atlassian.net/browse/RHEL-72728
  - Split using dirsrv_ and dirsrvadmin_ interfaces into separate blocks
  Resolves: RHEL-62706
  - Dontaudit virt_driver_domain execmem
  Resolves: RHEL-44901


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Paul Evans <pevans@redhat.com> - 1.48-8
changelog:
  - rescan-scsi-bus.sh: Correctly read RMB bit on enquiry (RHEL-153277)
  - rescan-scsi-bus.sh: Replace 'which' with build in 'command -v' (RHEL-70693)
  - sg_safte: update short option of version (RHEL-125869)
  - sg_rdac: accept --help or -h without error (RHEL-69439)
  - sg_inq: fix issing output fields in --export format (RHEL-119246, RHEL-123748)
  - sg_inq: re-add Unit serial number field (RHEL-119246, RHEL-123748)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-12
changelog:
  - groupmod.c: delete gr_free_members(&grp) to avoid double free
    Resolves: RHEL-135902
  - subordinateio.c: list_owner_ranges(): Fix duplicate range when
    username matches ID. Resolves: RHEL-114226


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Alejandro López <allopez@redhat.com> - 1.9.17-3.p2
changelog:
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-4.p2
changelog:
  - Bump release number
  - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
    due to failure in privilege drop calls


author: Alejandro López <allopez@redhat.com> - 1.9.17-8.p2
changelog:
  - Resolves: RHEL-95850 - A sudo'd command when invoked from ksh through a
    pipe mangles output, leaves tty insane


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


