# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-6
changelog:
  - Bump version to 3.2.0-6
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.


author: Viktor Ashirov <vashirov@redhat.com> - 3.3.0-1
changelog:
  - Bump version to 3.3.0
  - Resolves: RHEL-58681 - high wtime can hide a worker reading a large
    requests
  - Resolves: RHEL-62876 - Inconsistencies in the log messages
  - Resolves: RHEL-68692 - Replication halt caused by an incorrect setting of
    "nsslapd-changelogmaxage"
  - Resolves: RHEL-76836 - Crash in replica_config_add when manually
    configuring a replica with an incorrect nsds5ReplicaRoot.
  - Resolves: RHEL-80256 - [RFE] RHDS healthcheck tool could provide more
    information in offline mode
  - Resolves: RHEL-84531 - access log - suspicious wtime  optime negative and
    large values in internal op
  - Resolves: RHEL-86325 - dbscan utility not filtering using -k option
  - Resolves: RHEL-88942 - LDAP healthcheck and ignoring entrydn index and
    associated config
  - Resolves: RHEL-109505 - Possible memory leak when using the Retro
    Changelog plugin.
  - Resolves: RHEL-117666 - [RFE] Expose stats from deferred memberof
  - Resolves: RHEL-118811 - Password policy can be created even though the
    same one already exists
  - Resolves: RHEL-118867 - Memory leak issue in an IPA deployment.
  - Resolves: RHEL-121119 - Differences on export ldif using online of off-
    line method on RHDS
  - Resolves: RHEL-121169 - dsctl should report error when the ldif to import
    doesn't have permissions to be read by dirsrv.
  - Resolves: RHEL-129204 - Local password policies can be created with
    unallowed values
  - Resolves: RHEL-129597 - Remediate "Could not read password attribute"
    error on directory Servers with chaining enabled(DBLink)
  - Resolves: RHEL-132767 - An online reinitialization with LMDB is
    terminating the receiving server
  - Resolves: RHEL-134188 - RFE: add server-side configuration to ignore
    malformed controls and/or override critical controls from clients
  - Resolves: RHEL-138569 - AddressSanitizer: SEGV
    ldap/servers/plugins/automember/automember.c:1962 in
    automember_mod_post_op
  - Resolves: RHEL-140005 - Memory leaks in IPA context on server restart
  - Resolves: RHEL-141049 - Fail open condition in ACL
  - Resolves: RHEL-141480 - [RFE] Add shadowLastChange fixup task
  - Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
    certificates for use in 389-ds server
  - Resolves: RHEL-149125 - dnaSharedConfig: "dnaPortNum: 0"
  - Resolves: RHEL-151246 - dsctl healthcheck DSMOLE0001 inaccurate
    recommendations when there is more than 1 LDAP backend
  - Resolves: RHEL-152373 - Entry cache DN hash table corruption causes
    SIGSEGV in ns-slapd
  - Resolves: RHEL-153088 - [RFE] Add OS-level thread names to all server
    threads
  - Resolves: RHEL-153089 - [RFE] Add work queue metrics to cn=monitor
  - Resolves: RHEL-153092 - [RFE] Per-operation thread pool context via STAT
    extension
  - Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
    MemoryDenyWriteExecute despite broad capability set
  - Resolves: RHEL-154374 - Prevent the ability of creating a replication
    agreement from a node back to itself is needed
  - Resolves: RHEL-154380 - DS 12 does not handle escape char in bind user
  - Resolves: RHEL-157894 - Online export is failing when using the option
    "-s"
  - Resolves: RHEL-163373 - WARN - keys2idl - received NULL idl from
    index_read_ext_allids
  - Resolves: RHEL-165956 - can't modify user's name/dn if it's owner of
    SubIDs
  - Resolves: RHEL-169529 - Rebase 389-ds-base to 3.3.x
  - Resolves: RHEL-170277 - Memory leaks in syncrepl plugin during persistent
    search operations
  - Resolves: RHEL-170643 - passwordbadwords attribute of the local password
    policy is not functioning
  - Resolves: RHEL-170907 - Substring index produces empty results and can
    crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  - Resolves: RHEL-172228 - Replacing a group's member list modifies users
    who were already members
  - Resolves: RHEL-174908 - Replication errors in logs
  - Resolves: RHEL-181022 - Server shutdown during online reindex may lead to
    data loss


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147735


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - Resolves: RHEL-163803
  - Resolves: RHEL-163824

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Ales Nezbeda <anezbeda@redhat.com> - 0.8.8-49
changelog:
  - Fix SPDX license tag based on further research
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1976038980
  - Related: RHEL-37885


author: Than Ngo <than@redhat.com> - 2:1.12.0-3
changelog:
  - Fix Non-reproducible file names in doxygen output
  - Fix broken markdown links to anchors
  Related: RHEL-58045


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Parag Nemade <pnemade AT redhat DOT com> - 20230101-14
changelog:
  - Resolves: RHEL-138159
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138144
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138126
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-9
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-11
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
    Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
    Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.1.0 release
    - PRs analyzer/111475, c++/89224, c++/114856, c++/114889, c++/114935,
  	ipa/92606, middle-end/114734, middle-end/114907, modula2/113768,
  	modula2/114133, modula2/114929, rtl-optimization/114924,
  	sanitizer/114956, tree-optimization/114876,
  	tree-optimization/114921, tree-optimization/114965


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Arjun Shankar <arjun@redhat.com> - 2.39-111
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-126766)	
  - Upstream commit: ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc	
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)	
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)	
  - memalign: reinstate alignment overflow check (CVE-2026-0861)	
  - support: Exit on consistency check failure in resolv_response_add_name	
  - support: Fix FILE * leak in check_for_unshare_hints in test-container	
  - sprof: fix -Wformat warnings on 32-bit hosts	
  - sprof: check pread size and offset for overflow	
  - getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]	
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704)	
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)	
  - ppc64le: Restore optimized strncmp for power10	
  - ppc64le: Restore optimized strcmp for power10	
  - AArch64: Optimise SVE scalar callbacks	
  - aarch64: fix includes in SME tests	
  - aarch64: fix cfi directives around __libc_arm_za_disable	
  - aarch64: tests for SME	
  - aarch64: clear ZA state of SME before clone and clone3 syscalls	
  - aarch64: define macro for calling __libc_arm_za_disable	
  - aarch64: update tests for SME	
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp	
  - linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)	
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)	
  - x86: fix wmemset ifunc stray '!' (bug 33542)	
  - x86: Detect Intel Nova Lake Processor	
  - x86: Detect Intel Wildcat Lake Processor


author: Florian Weimer <fweimer@redhat.com> - 2.39-120
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-151554)
  - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
  - resolv: Check hostname for validity (CVE-2026-4438)
  - resolv: Count records correctly (CVE-2026-4437)
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module


author: Takao Fujiwara <tfujiwar@redhat.com> - 2018.1-17
changelog:
  - Resolve RHELPLAN-170235 Fix OpenScanHub report
  - Fix deprecated g_spawn_check_exit_status with -Wdeprecated-declarations
  - Fix uninitialized n_failed with -Wanalyzer-use-of-uninitialized-value
  - Fix to check return value of g_setenv() with CWE-252


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-7
changelog:
  - Resolves #2297147 Add directory datadir/GConf/gsettings
  - Resolves #2297735 Move ibus.conf to ibus-xinit sub package
  - Fix memory leaks in error handlings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-4
changelog:
  - Revert incorrect automated Release change from 1:21.0.5.0.11-2.1
  - Set rpmrelease to 4
  - Remove copy-jdk-configs logic
  - Remove alternatives removal special handling
  - Move postun alternatives logic to preun
  - Remove --family arguments to alternatives --install
  - Precompute alternative priorities at build time
  - Remove extra newlines
  - Inline .gz for alternatives slave man pages
  - Unwrap alternatives --install lines
  - Remove set_if_needed_alternatives
  - Unroll alternatives --install loops
  - Remove exit 0 from alternatives scriptlets
  - Move alternatives installation from posttrans to post
  - Replace jrelnk alternative with sdkdir
  - Remove full version from uniquejavadocdir
  - Remove full version from uniquesuffix
  - Fix classes.jsa and classes_nocoops.jsa file-listed-twice warnings
  - Eliminate devel "failed to link [/usr/lib/jvm/java-21-openjdk] exists and it is not a symlink" warning
  - Eliminate javadoc-zip "failed to link [/usr/share/javadoc/java-21-openjdk.zip] exists and it is not a symlink" warning
  - Eliminate javadoc "failed to link [/usr/share/javadoc/java-21-openjdk] exists and it is not a symlink" warning
  - Take ownership of versioned jvmdir in javadoc, javadoc-zip subpackages
  - Make headless own /usr/share/doc/java-21-openjdk
  - Make javadoc-zip own /usr/share/javadoc/java-21-openjdk
  - Delete old conflicting links in pretrans for headless, javadoc and javadoc-zip
  - Use compatiblename not name in uniquejavadocdir and uniquesuffix
  - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps
  - Use RPM global macro for man page file extension and unwrap --slave lines
  - Comment on alternatives removal in preun and RPM scriptlet idiom
  - Remove unused family macros
  - Document priority_for
  - Consistently end scriptlets with exit 0
  - Resolves: RHEL-71920
  - Resolves: RHEL-71954
  - Resolves: RHEL-69321
  - Resolves: RHEL-69995
  - Resolves: RHEL-71924
  - Resolves: RHEL-68848


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-5
changelog:
  - Document rationale for gtk-update-icon-cache being in posttrans
  - Remove extra spaces in posttrans files section headers
  - Resolves: RHEL-71488


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-6
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74407


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - Bump tzdata requirement to 2024b for JDK-8339637
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73565
  - Resolves: RHEL-74005


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-2
changelog:
  - Attempt to avoid conflicts between subpackages
    - Make javadoc packages depend on headless package for legal documentation
    - Only include legal subdirectory in headless package, not demo, src & javadoc{,-zip}
    - Change javadoc-zip to just own the top-level directory, not include the entire subtree
  - Resolves: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-3
changelog:
  - Cleanup java_javadoc_rpo macro, removing unused argument and duplicated Requires
  - Related: RHEL-78710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86986
  - Resolves: RHEL-86636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Bump portablerelease to match riscv64 patched version
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-92631


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102686


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:23.0.2.0.7-1
changelog:
  - Update to jdk-23.0.2+7 (GA)
  - Update release notes with features of JDK 23
  - Sync the copy of the portable specfile with the latest update
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:24.0.2.0.12-1
changelog:
  - Update to jdk-24.0.2+12 (GA)
  - Update release notes with features of JDK 24
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Sync the copy of the portable specfile with the latest update
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Related: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Drop fakefeaturever now we have reached OpenJDK 25
  - Update release notes to 25.0.1+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-120553


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Related: RHEL-120553


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-3
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128413
  - Resolves: RHEL-128409


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-4
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Resolves: RHEL-131896


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Introduce fakefeaturever to pretend we are java-25-openjdk ahead of time
  - Sync the copy of the portable specfile with the latest update
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Related: RHEL-100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:22.0.2.0.9-1
changelog:
  - Update to jdk-22.0.2+9 (GA)
  - Update release notes with features of JDK 22
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Sync the copy of the portable specfile with the latest update
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Related: RHEL-100678


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.25-1
changelog:
  - New upstream release
  - Fix PMTUd issues
  - Update docs and upstream URLs
  - Fix spec file for test suite build conditional
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Rebase to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify %check section to run both test targets in single invocation
  - Resolves: RHEL-121667


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4 tarball
  - Drop patches
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch and
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  - Enable build with support for BTF
  - Added BuildRequires: libbpf-devel
  - Support soname bumped to libabigail.so.3.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Fix sourceware.org/PR31045
    "Don't try setting translation unit for unique types"
    Apply patch
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch.
    That patch is applied in upstream mainline and will be available in
    libabigail 2.5.
  - Use %autosetup instead of the previous %setup and %patch macros.
  - Add git as a build requirement


author: Dodji Seketeli <dodji@redhat.com> - 2.4-3
changelog:
  - Fix sourceware.org/PR31017
    "Support Flex array conversion suppression"
    Apply patch 0002-suppression-Add-has_strict_flexible_array_data_membe.patch


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-221.el10]
changelog:
  - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs (Steve Best) [RHEL-117325]
  - tools/power cpupower: Show C0 in idle-info dump (Steve Best) [RHEL-133086]
  - tools/power cpupower: Reset errno before strtoull() (Steve Best) [RHEL-133086]
  - tools/cpupower: Use strcspn() to strip trailing newline (Steve Best) [RHEL-133086]
  - tools/cpupower: Fix inverted APERF capability check (Steve Best) [RHEL-133086]
  - cpupower: idle_monitor: fix incorrect value logged after stop (Steve Best) [RHEL-133086]
  - tools/cpupower: Fix incorrect size in cpuidle_state_disable() (Steve Best) [RHEL-133086]
  - tools/cpupower: fix error return value in cpupower_write_sysfs() (Steve Best) [RHEL-133086]
  - iio: pressure: bmp280: Fix bmp085 symbol namespace literal (Steve Dunnagan) [RHEL-120353]
  - iio: buffer: deprecated iio_push_to_buffers_with_timestamp() (Steve Dunnagan) [RHEL-120353]
  - iio: buffer: document iio_push_to_buffers_with_ts() (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: correct meas_time_us calculation (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use gpiod_set_value_cansleep() (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Remove noisy dev_info() (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: Remove redundant pm_runtime_mark_last_busy() calls (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280-spi: remove bits_per_word = 8 (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: Use iio_push_to_buffers_with_ts() to provide length for runtime checks. (Steve Dunnagan) [RHEL-120353]
  - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Steve Dunnagan) [RHEL-120353]
  - iio: core: mark scan_timestamp as __private (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Make time vars intuitive and move to fsleep (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use sizeof() for denominator (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Move bmp085 interrupt to new configuration (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Add data ready trigger support (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use sleep and forced mode for oneshot captures (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Fix uninitialized variable (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use char instead of s32 for data buffer (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use unsigned type for raw values (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Remove config error check for IIR filter updates (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Add support for bmp280 soft reset (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: Use bulk read for humidity calibration data (Steve Dunnagan) [RHEL-120353]
  - iio: pressure: bmp280: use irq_get_trigger_type() (Steve Dunnagan) [RHEL-120353]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-222.el10]
changelog:
  - net: page_pool: avoid false positive warning if NAPI was never added (CKI Backport Bot) [RHEL-162141]
  - net: vlan: sync VLAN features with lower device (Hangbin Liu) [RHEL-80405]
  - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-85741]
  - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-85741]
  - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-85741]
  - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-85741]
  - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-85741]
  - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-85741]
  - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-152959]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-223.el10]
changelog:
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CKI Backport Bot) [RHEL-168570] {CVE-2026-31402}
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function (Desnes Nunes) [RHEL-147795]
  - xhci: sideband: don't dereference freed ring when removing sideband endpoint (Desnes Nunes) [RHEL-147795] {CVE-2026-23009}
  - phy: freescale: imx8m-pcie: assert phy reset during power on (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Telit LE910 MBIM composition (Desnes Nunes) [RHEL-147795]
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,dwc3: Correct MSM8994 interrupts (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,dwc3: Correct IPQ5018 interrupts (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Check for USB4 IP_NAME (Desnes Nunes) [RHEL-147795]
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (Desnes Nunes) [RHEL-147795] {CVE-2025-71193}
  - phy: drop probe registration printks (Desnes Nunes) [RHEL-147795]
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Update UCSI structure to have message in and message out fields" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Add support for message out data structure" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Enable debugfs for message_out data structure" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Add support for SET_PDOS command" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common" (Desnes Nunes) [RHEL-147795]
  - Revert "usb: typec: ucsi: Get connector status after enable notifications" (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Get connector status after enable notifications (Desnes Nunes) [RHEL-147795]
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common (Desnes Nunes) [RHEL-147795]
  - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults (Desnes Nunes) [RHEL-147795]
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: move Telit 0x10c7 composition in the right place (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Telit Cinterion FE910C04 new compositions (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: core: Remove redundant comment in core init (Desnes Nunes) [RHEL-147795]
  - USB: serial: option: add Foxconn T99W760 (Desnes Nunes) [RHEL-147795]
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Desnes Nunes) [RHEL-147795]
  - USB: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147795]
  - drivers/usb/storage: use min() instead of min_t() (Desnes Nunes) [RHEL-147795]
  - usb: uas: reduce time under spinlock (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: eic7700: Add EIC7700 USB driver (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: Add ESWIN EIC7700 USB controller (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for SET_PDOS command (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Enable debugfs for message_out data structure (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for message out data structure (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Update UCSI structure to have message in and message out fields (Desnes Nunes) [RHEL-147795]
  - uapi: cdc.h: cleanly provide for more interfaces and countries (Desnes Nunes) [RHEL-147795]
  - usb: Remove redundant pm_runtime_mark_last_busy() calls (Desnes Nunes) [RHEL-147795]
  - usb: musb: fix gadget state on disconnect (Desnes Nunes) [RHEL-147795]
  - Documentation: PM: *_autosuspend() functions update last busy time (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_request_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147795]
  - Documentation: PM: runtime: Fix a reference to pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_sync_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_autosuspend() (Desnes Nunes) [RHEL-147795]
  - PM: runtime: Document return values of suspend-related API functions (Desnes Nunes) [RHEL-147795]
  - usb: host: ehci-platform: Call reset assert/deassert on suspend/resume (Desnes Nunes) [RHEL-147795]
  - usb: host: Do not check priv->clks[clk] (Desnes Nunes) [RHEL-147795]
  - usb: typec: tipd: mark as orientation aware (Desnes Nunes) [RHEL-147795]
  - usb: uas: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - usb: dwc2: fix hang during suspend if set as peripheral (Desnes Nunes) [RHEL-147795]
  - usb: dwc2: fix hang during shutdown if set as peripheral (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Set orientation_aware if UCSI version is 2.x and above (Desnes Nunes) [RHEL-147795]
  - usb: chaoskey: fix locking for O_NONBLOCK (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Kaanapali compatible (Desnes Nunes) [RHEL-147795]
  - xhci: Fix NULL pointer dereference when reading portli debugfs files (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Add debugfs support for xHCI Port Link Info (PORTLI) register. (Desnes Nunes) [RHEL-147795]
  - usb: xhci: standardize single bit-field macros (Desnes Nunes) [RHEL-147795]
  - usb: xhci: drop xhci-caps.h dependence on xhci-ext-caps.h (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify Max Scratchpad buffer macros (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify Isochronous Scheduling Threshold handling (Desnes Nunes) [RHEL-147795]
  - usb: xhci: improve xhci-caps.h comments (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit number of interrupts to 128 (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit number of ports to 127 (Desnes Nunes) [RHEL-147795]
  - usb: xhci: simplify handling of Structural Parameters 1 values (Desnes Nunes) [RHEL-147795]
  - usb: xhci: use cached HCSPARAMS1 value (Desnes Nunes) [RHEL-147795]
  - usb: xhci: remove unused trace operation and argument (Desnes Nunes) [RHEL-147795]
  - usb: xhci: remove deprecated TODO comment (Desnes Nunes) [RHEL-147795]
  - usb: xhci: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Don't unchain link TRBs on quirky HCs (Desnes Nunes) [RHEL-147795]
  - usb: xhci: Assume that endpoints halt as specified (Desnes Nunes) [RHEL-147795]
  - usb: xhci: implement USB Port Register Set struct (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add USB Port Register Set struct (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add helper to read PORTSC register (Desnes Nunes) [RHEL-147795]
  - usb: xhci: add tracing for PORTSC register writes (Desnes Nunes) [RHEL-147795]
  - usb: xhci: rework xhci_decode_portsc() (Desnes Nunes) [RHEL-147795]
  - xhci: simplify and rework trb_in_td() (Desnes Nunes) [RHEL-147795]
  - xhci: Add helper to find trb from its dma address (Desnes Nunes) [RHEL-147795]
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: renesas,rzg3e-xhci: Add RZ/V2H(P) and RZ/V2N support (Desnes Nunes) [RHEL-147795]
  - phy: fsl-imx8mq-usb: support alternate reference clock (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: imx8mq-usb: add alternate reference clock (Desnes Nunes) [RHEL-147795]
  - phy: qcom: qmp-pcie: Add support for Glymur PCIe Gen5x4 PHY (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qmp: pcs: Add v8.50 register offsets (Desnes Nunes) [RHEL-147795]
  - phy: qcom: qmp-combo: get the USB3 & DisplayPort lanes mapping from DT (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,qmp-pcie: document the SM8350 two lanes PCIe PHY (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp-phy: Document lanes mapping when not using in USB-C complex (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Document the Glymur QMP PCIe PHY (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Restrict resets per each device (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Update pcie phy bindings (Desnes Nunes) [RHEL-147795]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Update pcie phy bindings for QCS615 (Desnes Nunes) [RHEL-147795]
  - phy: qcom-qmp-combo: Use regulator_bulk_data with init_load_uA for regulator setup (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: imx8mp: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: ci_hdrc_imx: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147795]
  - pmdomain: core: Allow power-off for out-of-band wakeup-capable devices (Desnes Nunes) [RHEL-147795]
  - pmdomain: core: Convert to device_awake_path() (Desnes Nunes) [RHEL-147795]
  - PM: wakeup: Add out-of-band system wakeup support for devices (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: core: detach power domain for ci_hdrc platform device (Desnes Nunes) [RHEL-147795]
  - redhat/configs: Adding CONFIG_PHY_RZ_G3E_USB3 (Desnes Nunes) [RHEL-147795]
  - phy: renesas: Add Renesas RZ/G3E USB3.0 PHY driver (Desnes Nunes) [RHEL-147795]
  - phy: core: Remove extra space after '=' (Desnes Nunes) [RHEL-147795]
  - phy: add new phy_notify_state() api (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: drop NDI quirk module parameter (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: clean up NDI speed hack (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: enable NDI speed hack consistently (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: rename quirk symbols (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: clean up quirk comments (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: rewrite 8u2232c quirk (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: silence jtag probe (Desnes Nunes) [RHEL-147795]
  - USB: serial: ftdi_sio: match on interface number for jtag (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in xdomain.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in usb4.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tunnel.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tmu.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb_regs.h (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb.h (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in tb.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in switch.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in retimer.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in nhi.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in lc.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in icm.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in domain.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in debugfs.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typos in ctl.c (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: Add wake-up support for Tegra234 XUSB host controller (Desnes Nunes) [RHEL-147795]
  - usbnet: avoid a possible crash in dql_completed() (Desnes Nunes) [RHEL-147795]
  - net: usb: usbnet: adhere to style (Desnes Nunes) [RHEL-147795]
  - usbnet: fix crash due to missing BQL accounting after resume (Desnes Nunes) [RHEL-147795]
  - usbnet: Add support for Byte Queue Limits (BQL) (Desnes Nunes) [RHEL-147795]
  - net: usb: usbnet: coding style for functions (Desnes Nunes) [RHEL-147795]
  - usbnet: Prevents free active kevent (Desnes Nunes) [RHEL-147795] {CVE-2025-68312}
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147795]
  - Documentation: treewide: Replace marc.info links with lore (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Update deprecated firmware update site in icm.c (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Update NVM firmware upgrade documentation (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add support for orientation (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Add SET_POWER_LEVEL UCSI command to debugfs (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Glymur compatible (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add Milos compatible (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: drop unnecessary initialisations (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up set_termios() (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: add control request helpers (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up device type checks (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: clean up tiocmset() (Desnes Nunes) [RHEL-147795]
  - USB: serial: belkin_sa: clean up tiocmset() (Desnes Nunes) [RHEL-147795]
  - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147795]
  - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Allow usb role swich control from userspace (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: qcom,snps-dwc3: Add the SM8750 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Work around bogus clang shift overflow warning from DMA_BIT_MASK(64) (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Fix missing mutex_unlock() (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Add USB4 mode and TBT3 altmode support (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Rework ps883x_set() (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: Cache register settings, not Type-C mode (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix configuration error handling (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix missing accessibility check (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix registration race (Desnes Nunes) [RHEL-147795]
  - usb: typec: ps883x: fix probe error handling (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Report power supply change on sink path change (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Report power supply changes on power opmode changes (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: psy: Add power supply status (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: glue: Allow more fine grained control over mode switches (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: glue: Add documentation (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required (Desnes Nunes) [RHEL-147795]
  - usb: typec: pd: Register SPR AVS caps with usb_power_delivery class (Desnes Nunes) [RHEL-147795]
  - tcpm: Parse and log AVS APDO (Desnes Nunes) [RHEL-147795]
  - usbip: Use min to simplify stub_send_ret_submit (Desnes Nunes) [RHEL-147795]
  - usb: core: Add tracepoints for device allocation and state changes (Desnes Nunes) [RHEL-147795]
  - usb: core: Centralize device state update logic (Desnes Nunes) [RHEL-147795]
  - thunderbolt: Fix typo in tb_eeprom_ctl_read documentation (Desnes Nunes) [RHEL-147795]
  - usb: ljca: Improve ACPI hardware ID documentation (Desnes Nunes) [RHEL-147795]
  - usb: ljca: Order ACPI hardware IDs alphabetically (Desnes Nunes) [RHEL-147795]
  - usb: vhci-hcd: Replace pr_*() with dev_*() logging (Desnes Nunes) [RHEL-147795]
  - usb: vhci-hcd: Switch to dev_err_probe() in probe path (Desnes Nunes) [RHEL-147795]
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Desnes Nunes) [RHEL-147795] {CVE-2025-71108}
  - USB: Fix descriptor count when handling invalid MBIM extended descriptor (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: dwc3-generic-plat: Add layerscape dwc3 support (Desnes Nunes) [RHEL-147795]
  - usb: dwc3: Add software-managed properties for flattened model (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: add missed compatible string for arm64 layerscape (Desnes Nunes) [RHEL-147795]
  - usb: typec: altmodes/displayport: do not enter mode if port is the UFP (Desnes Nunes) [RHEL-147795]
  - usb: typec: class: add typec_get_data_role symbol (Desnes Nunes) [RHEL-147795]
  - usb: chipidea: imx: add USB support for i.MX94 (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: usbmisc-imx: add fsl,imx94-usbmisc compatible (Desnes Nunes) [RHEL-147795]
  - usb: typec: tipd: Fix error handling in cd321x_read_data_status (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: xhci: Add "generic-xhci" compatible for Marvell Armada 37xx/8k (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: xhci: Allow "iommus" and "dr_mode" properties (Desnes Nunes) [RHEL-147795]
  - usb: hub: Use max() to improve usb_set_lpm_pel() (Desnes Nunes) [RHEL-147795]
  - usbip: Fix locking bug in RT-enabled kernels (Desnes Nunes) [RHEL-147795]
  - usb: usbtmc: Remove unnecessary local variable from usbtmc_ioctl_request (Desnes Nunes) [RHEL-147795]
  - usb: ehci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: ehci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: uhci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147795]
  - usb: uhci: Add reset control support (Desnes Nunes) [RHEL-147795]
  - dt-bindings: usb: uhci: Add reset property (Desnes Nunes) [RHEL-147795]
  - usb: core: Drop spaces after function names (Desnes Nunes) [RHEL-147795]
  - usb: misc: ljca: Remove Wentong's e-mail address (Desnes Nunes) [RHEL-147795]
  - powerpc/perf/vpa-dtl: Add documentation for VPA dispatch trace log PMU (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Handle the writing of perf record when aux wake up is needed (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Add support to capture DTL data in aux buffer (Mamatha Inamdar) [RHEL-138521]
  - powerpc/perf/vpa-dtl: Add support to setup and free aux buffer for capturing DTL data (Mamatha Inamdar) [RHEL-138521]
  - powerpc/vpa_dtl: Add interface to expose vpa dtl counters via perf (Mamatha Inamdar) [RHEL-138521]
  - powerpc/time: Expose boot_tb via accessor (Mamatha Inamdar) [RHEL-138521]
  - docs: ABI: sysfs-bus-event_source-devices-vpa-dtl: Document sysfs event format entries for vpa_dtl pmu (Mamatha Inamdar) [RHEL-138521]
  - Documentation/rtla: Document --bpf-action option (Tomas Glozar) [RHEL-112653]
  - Documentation/rtla: Rename sample/ to example/ (Tomas Glozar) [RHEL-112653]
  - rtla/tests: Run Test::Harness in verbose mode (Tomas Glozar) [RHEL-112653]
  - rtla/tests: Test BPF action program (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Add example for BPF action program (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Add --bpf-action option (Tomas Glozar) [RHEL-112653]
  - rtla/timerlat: Support tail call from BPF program (Tomas Glozar) [RHEL-112653]
  - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() (Ondrej Mosnacek) [RHEL-53850]
  - fanotify: avoid/silence premature LSM capability checks (Ondrej Mosnacek) [RHEL-53850]
  - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix short gather if the unmap goes into a large mapping (Jerry Snitselaar) [RHEL-147902]
  - iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Remove MOCK_IOMMUPT_AMDV1 format (Jerry Snitselaar) [RHEL-147902]
  - types: reuse common phys_vec type instead of DMABUF open‑coded variant (Jerry Snitselaar) [RHEL-147902]
  - types: move phys_vec definition to common header (Jerry Snitselaar) [RHEL-147902]
  - nvme-pci: Use size_t for length fields to handle larger sizes (Jerry Snitselaar) [RHEL-147902]
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-v7s: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-147902]
  - iommu/sva: include mmu_notifier.h header (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: handle DMA_ATTR_CPU_CACHE_CLEAN in trace output (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: Allow multiple invocations of overlapping entries (Jerry Snitselaar) [RHEL-147902]
  - iommu: Fix mapping check for 0x0 to avoid re-mapping it (Jerry Snitselaar) [RHEL-147902]
  - powerpc/iommu: fix lockdep warning during PCI enumeration (Jerry Snitselaar) [RHEL-147902]
  - kunit: prevent log overwrite in param_tests (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: avoid random addr value print out on error path (Jerry Snitselaar) [RHEL-147902]
  - scatterlist: introduce sg_nents_for_dma() helper (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Remove dma_mark_clean (again) (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: track cache clean flag in entries (Jerry Snitselaar) [RHEL-147902]
  - docs: dma-api: document DMA_ATTR_CPU_CACHE_CLEAN (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: add DMA_ATTR_CPU_CACHE_CLEAN (Jerry Snitselaar) [RHEL-147902]
  - docs: dma-api: document __dma_from_device_group_begin()/end() (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: add __dma_from_device_group_begin()/end() (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: do not register driver in probe() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Always add IOVA range to iotlb_gather in gather_range_pages() (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Use page_ext_get_from_phys() (Jerry Snitselaar) [RHEL-147902]
  - mm/page_ext: Add page_ext_get_from_phys() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Do not set C-bit on MMIO backed PTEs (Jerry Snitselaar) [RHEL-147902]
  - iommu: simplify list initialization in iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Check mapped/unmapped kernel memory (Jerry Snitselaar) [RHEL-147902]
  - iommu: debug-pagealloc: Track IOMMU pages (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add calls for IOMMU_DEBUG_PAGEALLOC (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: enable IOMMU_DEBUG_PAGEALLOC in debug kernels (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add page_ext for IOMMU_DEBUG_PAGEALLOC (Jerry Snitselaar) [RHEL-147902]
  - iommu: Introduce pci_dev_reset_iommu_prepare/done() (Jerry Snitselaar) [RHEL-147902]
  - iommu: Add iommu_driver_get_domain_for_dev() helper (Jerry Snitselaar) [RHEL-147902]
  - iommu: Tidy domain for iommu_setup_dma_ops() (Jerry Snitselaar) [RHEL-147902]
  - iommu: Lock group->mutex in iommu_deferred_attach() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix type of type parameter to amd_iommufd_hw_info() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Remove unused variable in amd_iommufd_viommu_destroy() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nested domain attach/detach (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Refactor logic to program the host page table in DTE (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Refactor persistent DTE bits programming into amd_iommu_make_clear_dte() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce gDomID-to-hDomID Mapping and handle parent domain invalidation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nested domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce struct amd_iommu_viommu (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for nest parent domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Always enable GCR3TRPMode when supported. (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Introduce data struct for AMD nested domain allocation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Introduce helper function amd_iommu_update_dte() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Make amd_iommu_make_clear_dte() non-static inline (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Rename DEV_DOMID_MASK to DTE_DOMID_MASK (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: add AMD_IOMMU_IOMMUFD (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support for hw_info for iommu capability query (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Drop incorrect NULL check for iommu in alloc_irq_table() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: move wait_on_sem() out of spinlock (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Fix race condition during PASID entry replacement (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Clear Present bit before tearing down context entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Clear Present bit before tearing down PASID entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush piotlb for SVM and Nested domain (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush cache for PASID table before using it (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is Translate (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3-test: Add nested s1bypass/s1dssbypass coverage (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Mark STE MEV safe when computing the update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Add update_safe bits to fix STE update sequence (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Add device-tree support for CMDQV driver (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra241-cmdqv: Decouple driver from ACPI (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Restore ACTLR settings for MDSS on sa8775p (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Remove IAS (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Add actlr settings for mdss on Qualcomm platforms (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency (Jerry Snitselaar) [RHEL-147902]
  - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-147902]
  - dt-bindings: iommu: Add NVIDIA Tegra CMDQV support (Jerry Snitselaar) [RHEL-147902]
  - Documentation/x86: Update IOMMU spec references to use stable identifiers (Jerry Snitselaar) [RHEL-147902]
  - x86/irq: Cleanup posted MSI code (Jerry Snitselaar) [RHEL-147902]
  - x86/irq_remapping: Sanitize posted_msi_supported() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Use core's primary handler and set IRQF_ONESHOT (Jerry Snitselaar) [RHEL-147902]
  - tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Treat PAGE_SNOOP and PWSNP separately (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra241-cmdqv: Reset VCMDQ in tegra241_vcmdq_hw_init_user() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Only cache flush memory changed by unmap (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Initialize batch->kind in batch_clear() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: distinguish between missing and exhausted atomic pools (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: fix size_t signedness bug in unmap path (Jerry Snitselaar) [RHEL-147902] {CVE-2026-23067}
  - iommupt: Make it clearer to the compiler that pts.level == 0 for single page (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: Avoid allocating redundant pools (Jerry Snitselaar) [RHEL-147902]
  - mm_zone: Generalise has_managed_dma() (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: Improve pool lookup (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Make pt_feature() always_inline (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Prevent module/builtin conflicts in kconfig (Jerry Snitselaar) [RHEL-147902]
  - amd/iommu: Make protection domain ID functions non-static (Jerry Snitselaar) [RHEL-147902]
  - amd/iommu: Preserve domain ids inside the kdump kernel (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Return ERR_PTR from _table_alloc() (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Jerry Snitselaar) [RHEL-147902] {CVE-2025-71122}
  - iommufd/selftest: Do not leak the hwpt if IOMMU_TEST_OP_MD_CHECK_MAP fails (Jerry Snitselaar) [RHEL-147902]
  - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Fix DMA_BIT_MASK() macro being broken (Jerry Snitselaar) [RHEL-147902]
  - dma/pool: eliminate alloc_pages warning in atomic_pool_expand (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: fix SEV-TIO support reporting (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Report SEV-TIO support (Jerry Snitselaar) [RHEL-147902]
  - powerpc: Convert to physical address DMA mapping (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: remove unused mapping resource callbacks (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: convert dummy ops to physical address mapping (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: prepare dma_map_ops to conversion to physical address (Jerry Snitselaar) [RHEL-147902]
  - tools/dma: move dma_map_benchmark from selftests to tools/dma (Jerry Snitselaar) [RHEL-147902]
  - iommupt/vtd: Support mgaw's less than a 4 level walk for first stage (Jerry Snitselaar) [RHEL-147902]
  - iommupt/vtd: Allow VT-d to have a larger table top than the vasz requires (Jerry Snitselaar) [RHEL-147902]
  - genpt: Make GENERIC_PT invisible (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Avoid a compiler bug with sw_bit (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix unlikely flows in increase_top() (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Restore previous domain::aperture_end calculation (Jerry Snitselaar) [RHEL-147902]
  - iommu/tegra: fix device leak on probe_device() (Jerry Snitselaar) [RHEL-147902]
  - iommu/ipmmu-vmsa: fix device leak on of_xlate() (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Actually correct pt_test_sw_bit_{acquire_release}() parameter description (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: populate lpae pgtable kunit test (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-selftests: Use KUnit (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm-selftests: Modularize the test (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: Move selftests to a separate file (Jerry Snitselaar) [RHEL-147902]
  - iommu/io-pgtable-arm: Remove arm_lpae_dump_ops() (Jerry Snitselaar) [RHEL-147902]
  - iommu/iommupt: Fix build error in genericpt unit-tests (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Documentation fixes (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Describe @bitnr parameter (Jerry Snitselaar) [RHEL-147902]
  - Documentation: genpt: Don't use code block marker before iommu_amdv1.c include listing (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for the SW bits (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Follow PT_FEAT_DMA_INCOHERENT into the PASID entry (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Use the generic iommu page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt/x86: Support SW bits and permit PT_FEAT_DMA_INCOHERENT (Jerry Snitselaar) [RHEL-147902]
  - iommupt/x86: Set the dirty bit only for writable PTEs (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the Intel VT-d second stage page table format (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Flush the CPU cache after any writes to the page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Use the incoherent start/stop functions for PT_FEAT_DMA_INCOHERENT (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add basic support for SW bits in the page table (Jerry Snitselaar) [RHEL-147902]
  - iommu/pages: Add support for incoherent IOMMU page table walkers (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for the IOMMU implementation (Jerry Snitselaar) [RHEL-147902]
  - Documentation: kunit: Document new parameterized test features (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add example parameterized test with direct dynamic parameter array setup (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add example parameterized test with shared resource management using the Resource API (Jerry Snitselaar) [RHEL-147902]
  - kunit: Enable direct registration of parameter arrays to a KUnit test (Jerry Snitselaar) [RHEL-147902]
  - kunit: Pass parameterized test context to generate_params() (Jerry Snitselaar) [RHEL-147902]
  - kunit: Introduce param_init/exit for parameterized test context management (Jerry Snitselaar) [RHEL-147902]
  - kunit: Add parent kunit for parameterized test context (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Remove AMD io_pgtable support (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Use the generic iommu page table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the x86 64 bit page table format (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Change the selftest to use iommupt instead of xarray (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a mock pagetable format for iommufd selftest to use (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Fix the kunit building (Jerry Snitselaar) [RHEL-147902]
  - redhat: config: Populate iommu pt kunit config option (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add a kunit test for Generic Page Table (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add read_and_clear_dirty op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add map_pages op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add unmap_pages op (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add iova_to_phys op (Jerry Snitselaar) [RHEL-147902]
  - powerpc/pseries/svm: Make mem_encrypt.h self contained (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the AMD IOMMU v1 page table format (Jerry Snitselaar) [RHEL-147902]
  - iommupt: Add the basic structure of the iommu implementation (Jerry Snitselaar) [RHEL-147902]
  - genpt: Add Documentation/ files (Jerry Snitselaar) [RHEL-147902]
  - redhat/configs: Populate debug generic pt config option (Jerry Snitselaar) [RHEL-147902]
  - genpt: Generic Page Table base API (Jerry Snitselaar) [RHEL-147902]
  - iommu: Pass in old domain to attach_dev callback functions (Jerry Snitselaar) [RHEL-147902]
  - iommu: Do not revert set_domain for the last gdev (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Set release_domain to blocked_domain (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Set release_domain to arm_smmu_blocked_domain (Jerry Snitselaar) [RHEL-147902]
  - iommu: Generic support for RMRs during device release (Jerry Snitselaar) [RHEL-147902]
  - iommu/pages: use folio_nr_pages() instead of shift operation (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Enhance "Completion-wait Time-out" error message (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Set INTEL_IOMMU_FLOPPY_WA depend on BLK_DEV_FD (Jerry Snitselaar) [RHEL-147902]
  - iommu: tegra: enable compile testing (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables (Jerry Snitselaar) [RHEL-147902]
  - iommu/arm-smmu-qcom: Add Glymur MDSS compatible (Jerry Snitselaar) [RHEL-147902]
  - selftests/dma: fix invalid array access in printf (Jerry Snitselaar) [RHEL-147902]
  - dma-mapping: Allow use of DMA_BIT_MASK(64) in global scope (Jerry Snitselaar) [RHEL-147902]
  - iommufd: Make vfio_compat's unmap succeed if the range is already empty (Jerry Snitselaar) [RHEL-147902]
  - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Skip enabling command/event buffers for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Reuse device table for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: Add support to remap/unmap IOMMU buffers for kdump (Jerry Snitselaar) [RHEL-147902]
  - iommu/amd: use str_plural() to simplify the code (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: debugfs: Avoid dumping context command register (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Removal of Advanced Fault Logging (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: PRS isn't usable if PDS isn't supported (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Remove LPIG from page group response descriptor (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Drop unused cap_super_offset() (Jerry Snitselaar) [RHEL-147902]
  - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() (Jerry Snitselaar) [RHEL-147902]
  - swiotlb: Remove redundant __GFP_NOWARN (Jerry Snitselaar) [RHEL-147902]
  - dma-direct: clean up the logic in __dma_direct_alloc_pages() (Jerry Snitselaar) [RHEL-147902]
  - dma-remap: drop nth_page() in dma_common_contiguous_remap() (Jerry Snitselaar) [RHEL-147902]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137405] {CVE-2025-68285}
  - clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init() (Radu Rendec) [RHEL-77269]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-224.el10]
changelog:
  - tools/power turbostat: Allow execution to continue after perf_l2_init() failure (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix delimiter bug in print functions (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix --show/--hide for individual cpuidle counters (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix incorrect format variable (Steve Best) [RHEL-129778]
  - tools/power turbostat: Consistently use print_float_value() (Steve Best) [RHEL-129778]
  - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon (Steve Best) [RHEL-129778]
  - tools/power turbostat: Eliminate unnecessary data structure allocation (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix swidle header vs data display (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix illegal memory access when SMT is present and disabled (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix AMD RAPL regression (Steve Best) [RHEL-129778]
  - tools/power turbostat: version 2026.02.14 (Steve Best) [RHEL-129778]
  - tools/power turbostat: Fix and document --header_iterations (Steve Best) [RHEL-129778]
  - tools/power turbostat: Use strtoul() for iteration parsing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Favor cpu# over core# (Steve Best) [RHEL-129778]
  - tools/power turbostat: Expunge logical_cpu_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Enhance HT enumeration (Steve Best) [RHEL-129778]
  - tools/power turbostat: Simplify global core_id calculation (Steve Best) [RHEL-129778]
  - tools/power turbostat: Unify even/odd/average counter referencing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Allocate average counters dynamically (Steve Best) [RHEL-129778]
  - tools/power turbostat: Delete core_data.core_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Rename physical_core_id to core_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Cleanup package_id (Steve Best) [RHEL-129778]
  - tools/power turbostat: Cleanup internal use of "base_cpu" (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add L2 cache statistics (Steve Best) [RHEL-129778]
  - tools/power turbostat: Remove redundant newlines from err(3) strings (Steve Best) [RHEL-129778]
  - tools/power turbostat: Allow more use of is_hybrid flag (Steve Best) [RHEL-129778]
  - tools/power turbostat: Rename "LLCkRPS" column to "LLCMRPS" (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Document the "--force" option (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Document Totl%C0, Any%C0, GFX%C0, CPUGFX% columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Harden against unexpected values (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump hypervisor name (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump CPUID.1.ECX[31] (Hypervisor) (Steve Best) [RHEL-129778]
  - tools/power turbostat: Dump CPUID(1) consistently with CPUID(6) (Steve Best) [RHEL-129778]
  - tools/power turbostat: AMD: msr offset 0x611 read failed: Input/output error (Steve Best) [RHEL-129778]
  - tools/power turbostat: version 2025.12.02 (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print wide names only for RAW 64-bit columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print percentages in 8-columns (Steve Best) [RHEL-129778]
  - tools/power turbostat: Print "nan" for out of range percentages (Steve Best) [RHEL-129778]
  - tools/power turbostat: Validate APERF access for VMWARE (Steve Best) [RHEL-129778]
  - tools/power turbostat: Enhance perf probe (Steve Best) [RHEL-129778]
  - tools/power turbostat: Validate RAPL MSRs for AWS Nitro Hypervisor (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add run-time MSR driver probe (Steve Best) [RHEL-129778]
  - tools/power turbostat: Set per_cpu_msr_sum to NULL after free (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add LLC stats (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: fix typo: idle_pct should be pct_idle (Steve Best) [RHEL-129778]
  - tools/power turbostat: Remove dead code (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor floating point printout code (Steve Best) [RHEL-129778]
  - tools/power turbostat.8: Update example (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor added-counter value printing code (Steve Best) [RHEL-129778]
  - tools/power turbostat: Refactor added column header printing (Steve Best) [RHEL-129778]
  - tools/power turbostat: Add Wildcat Lake and Nova Lake support (Steve Best) [RHEL-129778]
  - tools/power turbostat: Regression fix Uncore MHz printed in hex (Steve Best) [RHEL-129778]
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-164343] {CVE-2026-23270}
  - Prevent stripping of rtla and rv binaries during install (John Kacur) [RHEL-85865 RHEL-85868]
  - Fix rtla and rv debuginfo package definitions (John Kacur) [RHEL-85865 RHEL-85868]
  - Add debuginfo package for rtla tool (John Kacur) [RHEL-85865 RHEL-85868]
  - Add debuginfo package for rv tool (John Kacur) [RHEL-85865 RHEL-85868]
  - iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show (Jerry Snitselaar) [RHEL-140474]
  - redhat/configs: Enable AMD IOMMU DebugFS support (Jerry Snitselaar) [RHEL-140474]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-225.el10]
changelog:
  - firmware: qcom_scm: Use TASK_IDLE state in wait_for_wq_completion() (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom_scm: Support multiple waitq contexts (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom_scm: Add API to get waitqueue IRQ info (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: allow QSEECOM on Surface Pro 11 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: tzmem: export shm_bridge create/delete (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: add support for object invocation (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on Dell Inspiron 7441 / Latitude 7455 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on Lenovo Thinkbook 16 (Mattijs Korpershoek) [RHEL-170163]
  - firmware: qcom: scm: Allow QSEECOM on HAMOA-IOT-EVK (Mattijs Korpershoek) [RHEL-170163]
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-169566] {CVE-2025-68724}
  - PCI: hv: Fix double ida_free in hv_pci_probe error path (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-vntb: Fix MSI doorbell IRQ unwind (Myron Stowe) [RHEL-139975]
  - PCI: s32g: Skip Root Port removal during success (Myron Stowe) [RHEL-139975]
  - PCI: Provide pci_free_irq_vectors() stub (Myron Stowe) [RHEL-139975]
  - PCI: meson: Report that link is up while in ASPM L0s and L1 states (Myron Stowe) [RHEL-139975]
  - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC (Myron Stowe) [RHEL-139975]
  - MAINTAINERS: Add Manivannan Sadhasivam as PCI/pwrctrl maintainer (Myron Stowe) [RHEL-139975]
  - PCI: Use max() instead of max_t() to ease static analysis (Myron Stowe) [RHEL-139975]
  - PCI: qcom: Implement .assert_perst() (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Implement .assert_perst() for dwc glue drivers (Myron Stowe) [RHEL-139975]
  - PCI: Add .assert_perst() to control PCIe PERST# (Myron Stowe) [RHEL-139975]
  - MAINTAINERS: Add NXP S32G PCIe controller driver maintainer (Myron Stowe) [RHEL-139975]
  - PCI: s32g: Add NXP S32G PCIe controller driver (RC) (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Add register and bitfield definitions (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: s32g: Add NXP S32G PCIe controller (Myron Stowe) [RHEL-139975]
  - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: amlogic: Fix the register name of the DBI region (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Add support for Airoha AN7583 SoC (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Use generic MACRO for TPVPERL delay (Myron Stowe) [RHEL-139975]
  - PCI: mediatek: Convert bool to single quirks entry and bitmap (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: mediatek: Add support for Airoha AN7583 (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: mediatek: Convert to YAML schema (Myron Stowe) [RHEL-139975]
  - PCI: keystone: Add support to build as a loadable module (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Export dw_pcie_allocate_domains() and dw_pcie_ep_raise_msix_irq() (Myron Stowe) [RHEL-139975]
  - PCI: Export pci_get_host_bridge_device() for use by pci-keystone (Myron Stowe) [RHEL-139975]
  - PCI: keystone: Exit ks_pcie_probe() for invalid mode (Myron Stowe) [RHEL-139975]
  - PCI: j721e: Use 'pcie->reset_gpio' directly and drop the local variable (Myron Stowe) [RHEL-139975]
  - PCI: j721e: Use devm_clk_get_optional_enabled() to get and enable the clock (Myron Stowe) [RHEL-139975]
  - PCI: ixp4xx: Guard ARM32-specific hook_fault_code() (Myron Stowe) [RHEL-139975]
  - PCI: dw-rockchip: Simplify regulator setup with devm_regulator_get_enable_optional() (Myron Stowe) [RHEL-139975]
  - PCI: dw-rockchip: Configure L1SS support (Myron Stowe) [RHEL-139975]
  - PCI: tegra194: Remove unnecessary L1SS disable code (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Advertise L1 PM Substates only if driver requests it (Myron Stowe) [RHEL-139975]
  - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Add panic/die handler to driver (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Add a way to indicate if PCIe bridge is active (Myron Stowe) [RHEL-139975]
  - PCI: brcmstb: Fix disabling L0s capability (Myron Stowe) [RHEL-139975]
  - PCI: host-generic: Move bridge allocation outside of pci_host_common_init() (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-vntb: Add MSI doorbell support (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Add pci_epf_assign_bar_space() API (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Add pci_epf_get_required_bar_size() helper (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: Rename 'epf_bar::aligned_size' to 'epf_bar:mem_size' (Myron Stowe) [RHEL-139975]
  - PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-x1e80100: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sa8775p: Add missing required power-domains and resets (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: Update the email address for Manivannan Sadhasivam (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: amlogic,axg-pcie: Fix select schema (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: qcom,pcie-sm8550: Add Kaanapali compatible (Myron Stowe) [RHEL-139975]
  - dt-bindings: PCI: dwc: rockchip: Add RK3528 variant (Myron Stowe) [RHEL-139975]
  - PCI: Fix Resizable BAR restore order (Myron Stowe) [RHEL-139975]
  - PCI: Fix BAR resize rollback path overwriting ret (Myron Stowe) [RHEL-139975]
  - PCI: Validate pci_rebar_size_supported() input (Myron Stowe) [RHEL-139975]
  - PCI: Convert BAR sizes bitmasks to u64 (Myron Stowe) [RHEL-139975]
  - drm/amdgpu: Use pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - drm/xe/vram: Use pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - PCI: Add pci_rebar_get_max_size() (Myron Stowe) [RHEL-139975]
  - drm/xe/vram: Use PCI rebar helpers in resize_vram_bar() (Myron Stowe) [RHEL-139975]
  - drm/i915/gt: Use pci_rebar_size_supported() (Myron Stowe) [RHEL-139975]
  - PCI: Add pci_rebar_size_supported() helper (Myron Stowe) [RHEL-139975]
  - PCI: Improve Resizable BAR functions kernel doc (Myron Stowe) [RHEL-139975]
  - PCI: Move pci_rebar_size_to_bytes() and export it (Myron Stowe) [RHEL-139975]
  - PCI: Move pci_rebar_bytes_to_size() and clean it up (Myron Stowe) [RHEL-139975]
  - PCI: Move Resizable BAR code to rebar.c (Myron Stowe) [RHEL-139975]
  - PCI: Prevent restoring assigned resources (Myron Stowe) [RHEL-139975]
  - drm/amdgpu: Remove driver side BAR release before resize (Myron Stowe) [RHEL-139975]
  - drm/i915: Remove driver side BAR release before resize (Myron Stowe) [RHEL-139975]
  - PCI: Add kerneldoc for pci_resize_resource() (Myron Stowe) [RHEL-139975]
  - PCI: Fix restoring BARs on BAR resize rollback path (Myron Stowe) [RHEL-139975]
  - PCI: Free saved list without holding pci_bus_sem (Myron Stowe) [RHEL-139975]
  - PCI: Try BAR resize even when no window was released (Myron Stowe) [RHEL-139975]
  - PCI: Change pci_dev variable from 'bridge' to 'dev' (Myron Stowe) [RHEL-139975]
  - PCI/IOV: Adjust ->barsz[] when changing BAR size (Myron Stowe) [RHEL-139975]
  - PCI: Prevent resource tree corruption when BAR resize fails (Myron Stowe) [RHEL-139975]
  - PCI/PTM: Enable only if device advertises relevant role (Myron Stowe) [RHEL-139975]
  - Documentation: PCI: Amend error recovery doc with pci_save_state() rules (Myron Stowe) [RHEL-139975]
  - treewide: Drop pci_save_state() after pci_restore_state() (Myron Stowe) [RHEL-139975]
  - PCI/ERR: Ensure error recoverability at all times (Myron Stowe) [RHEL-139975]
  - PCI/PM: Stop needlessly clearing state_saved on enumeration and thaw (Myron Stowe) [RHEL-139975]
  - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths (Myron Stowe) [RHEL-139975]
  - PCI: vmd: Switch to pci_bus_find_emul_domain_nr() (Myron Stowe) [RHEL-139975]
  - PCI: Enable host bridge emulation for PCI_DOMAINS_GENERIC platforms (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device leak at device stop (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device and OF node leak at bus scan (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix device leak at registration (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Add optional slot clock for PCI slots (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Create pwrctrl devices only when CONFIG_PCI_PWRCTRL is enabled (Myron Stowe) [RHEL-139975]
  - arm64: Kconfig: switch to HAVE_PWRCTRL (Myron Stowe) [RHEL-139975]
  - wifi: ath12k: switch to PCI_PWRCTRL_PWRSEQ (Myron Stowe) [RHEL-139975]
  - wifi: ath11k: switch to PCI_PWRCTRL_PWRSEQ (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Rename pwrctrl Kconfig symbols and slot module (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Add pwrctrl driver for PCI slots (Myron Stowe) [RHEL-139975]
  - dt-bindings: vendor-prefixes: Document the 'pciclass' prefix (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Skip scanning for the device further if pwrctrl device is created (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Move pci_pwrctrl_unregister() to pci_destroy_dev() (Myron Stowe) [RHEL-139975]
  - PCI/pwrctrl: Move creation of pwrctrl devices to pci_scan_device() (Myron Stowe) [RHEL-139975]
  - Bluetooth: mgmt: Add idle_timeout to configurable system parameters (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix regressions caused by reusing ident (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: clamp SCO altsetting table indices (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix not tracking outstanding TX ident (David Marlin) [RHEL-157827]
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix send LE flow credits in ACL link (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (David Marlin) [RHEL-157827]
  - Bluetooth: hci_ll: Fix firmware leak on error path (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-157827]
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req (David Marlin) [RHEL-157827]
  - Bluetooth: qca: fix ROM version reading on WCN3998 chips (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (David Marlin) [RHEL-157827]
  - Bluetooth: HIDP: Fix possible UAF (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Fix hci_le_create_conn_sync (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Fix defer tests being unstable (David Marlin) [RHEL-157827]
  - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (David Marlin) [RHEL-157827]
  - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (David Marlin) [RHEL-157827]
  - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (David Marlin) [RHEL-157827]
  - Bluetooth: Fix CIS host feature condition (David Marlin) [RHEL-157827]
  - Bluetooth: hci_sync: Add LE Channel Sounding HCI Command/event structures (David Marlin) [RHEL-157827]
  - Bluetooth: purge error queues in socket destructors (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: hci_qca: Cleanup on all setup failures (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short (David Marlin) [RHEL-157827]
  - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add device ID for Realtek RTL8761BU (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID for RTL8852CE (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: Set link_policy on incoming ACL connections (David Marlin) [RHEL-157827]
  - Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when BT_EN is pulled up by hw (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 (David Marlin) [RHEL-157827]
  - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: report BIS capability flags in supported settings (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-157827]
  - drivers/bluetooth: btbcm: Use kmalloc_array() to prevent overflow (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Introduce HCI Driver protocol (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: add new custom firmwares (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x13d3/0x3619 for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x13d3/0x3618 for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (David Marlin) [RHEL-157827]
  - Bluetooth: iso: fix socket matching ambiguity between BIS and CIS (David Marlin) [RHEL-157827]
  - Bluetooth: btrtl: Add the support for RTL8761CUV (David Marlin) [RHEL-157827]
  - Bluetooth: Remove redundant pm_runtime_mark_last_busy() calls (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Reclassify Qualcomm WCN6855 debug packets (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Suspend/Resume: Controller doorbell interrupt handling (David Marlin) [RHEL-157827]
  - Bluetooth: btintel_pcie: Support for S4 (Hibernate) (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (David Marlin) [RHEL-157827]
  - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Fix not updating BIS sender source address (David Marlin) [RHEL-157827]
  - Bluetooth: MGMT: Allow use of Set Device Flags without Add Device (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Attempt to resolve broadcast address (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Always use the identity address when initializing a connection (David Marlin) [RHEL-157827]
  - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-157827]
  - Bluetooth: hci_core: Introduce HCI_CONN_FLAG_PAST (David Marlin) [RHEL-157827]
  - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-157827]
  - Bluetooth: hci_h5: implement CRC data integrity (David Marlin) [RHEL-157827]
  - Bluetooth: hci_h5: avoid sending two SYNC messages (David Marlin) [RHEL-157827]
  - Bluetooth: mediatek: add gpio pin to reset bt (David Marlin) [RHEL-157827]
  - sfc: add transmit timestamping support (Izabela Bakollari) [RHEL-165819]
  - cpufreq: intel_pstate: Fix crash during turbo disable (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (Steve Best) [RHEL-133082]
  - cpufreq: Pass policy pointer to ->update_limits() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Eliminate some code duplication (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Use mutex guard for driver locking (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add Diamond Rapids OOB mode support (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Improve printing of debug messages (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: hybrid: Adjust energy model rules (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add and use hybrid_has_l3() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Add and use hybrid_get_cpu_type() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Use likely() optimization in intel_pstate_sample() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Enable HWP without EPP if DEC is enabled (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Adjust frequency percentage computations (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange freq QoS updates using __free() (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Remove EPB-related code (Steve Best) [RHEL-133082]
  - cpufreq: intel_pstate: Rearrange variable declaration involving __free() (Steve Best) [RHEL-133082]
  - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164429]
  - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164429]
  - x86/resctrl: Fix memory bandwidth counter width for Hygon (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add missing resctrl initialization for Hygon (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Update documentation for telemetry events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Move RMID initialization to first mount (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Compute number of RMIDs as minimum across resources (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Fix non-contiguous CBM check for Hygon (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Add CPU vendor detection for Hygon (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Define CPU vendor IDs as bits to match usage (Gavin Shan) [RHEL-163514]
  - selftests/resctrl: Fix a division by zero error on Hygon (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add energy/perf choices to rdt boot option (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Refactor mkdir_mondata_subdir() (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Read telemetry events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Find and enable usable telemetry events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add architectural event pointer (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Discover hardware telemetry events (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add and initialize a resource for package scope monitoring (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Add an architectural hook called for first mount (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Support binary fixed point event counters (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Handle events that can be read from any CPU (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Make event details accessible to functions when reading events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Rename some L3 specific functions (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Split L3 dependent parts out of __mon_event_count() (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Clean up domain_remove_cpu_ctrl() (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Move L3 initialization into new helper function (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Improve domain type checking (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Update bit_usage to reflect io_alloc (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to modify io_alloc capacity bitmasks (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Modify struct rdt_parse_data to pass mode and CLOSID (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display io_alloc CBMs (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add user interface to enable/disable io_alloc feature (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display "io_alloc" support (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Implement "io_alloc" enable/disable handlers (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Detect io_alloc feature (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add SDCIAE feature in the command line options (Gavin Shan) [RHEL-163514]
  - x86/cpufeatures: Add support for L3 Smart Data Cache Injection Allocation Enforcement (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Consider sparse masks when initializing new group's allocation (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled (Gavin Shan) [RHEL-163514]
  - MAINTAINERS: resctrl: Add myself as reviewer (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Configure mbm_event mode if supported (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to switch between monitor modes (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to modify assignments in a group (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Provide interface to update the event configurations (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add event configuration directory under info/L3_MON/ (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Pass struct rdtgroup instead of individual members (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add the functionality to unassign MBM events (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add the functionality to assign MBM events (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce event configuration field in struct mon_evt (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add data structures and definitions for ABMC assignment (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce interface to display number of free MBM counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Add resctrl file to display number of assignable counters (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Introduce the interface to display monitoring modes (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add support to enable/disable AMD ABMC feature (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Add ABMC feature in the command line options (Gavin Shan) [RHEL-163514]
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Prepare for more monitor events (Gavin Shan) [RHEL-163514]
  - x86/resctrl: Remove the rdt_mon_features global variable (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Replace architecture event enabled checks (Gavin Shan) [RHEL-163514]
  - x86,fs/resctrl: Consolidate monitor event descriptions (Gavin Shan) [RHEL-163514]
  - fs/resctrl: Optimize code in rdt_get_tree() (Gavin Shan) [RHEL-163514]
  - Documentation: Fix filesystems typos (Gavin Shan) [RHEL-163514]
  - ACPI: CPPC: add APIs and sysfs interface for perf_limited (Mark Langsdorf) [RHEL-143330]
  - cpufreq: cppc: Update MIN_PERF/MAX_PERF in target callbacks (Mark Langsdorf) [RHEL-143330]
  - cpufreq: CPPC: Update cached perf_ctrls on sysfs write (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Extend cppc_set_epp_perf() for FFH/SystemMemory (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Warn on missing mandatory DESIRED_PERF register (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Add cppc_get_perf() API to read performance controls (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Rename EPP constants for clarity (Mark Langsdorf) [RHEL-143330]
  - ACPI: CPPC: Clean up cppc_perf_caps and cppc_perf_ctrls structs (Mark Langsdorf) [RHEL-143330]
  - cpufreq: CPPC: Add generic helpers for sysfs show/store (Mark Langsdorf) [RHEL-143330]
  - intel_idle: Add C-states validation (Steve Best) [RHEL-129779]
  - intel_idle: Add cmdline option to adjust C-states table (Steve Best) [RHEL-129779]
  - intel_idle: Initialize sysfs after cpuidle driver initialization (Steve Best) [RHEL-129779]
  - intel_idle: Remove the 'preferred_cstates' parameter (Steve Best) [RHEL-129779]
  - intel_idle: Remove unused driver version constant (Steve Best) [RHEL-129779]
  - intel_idle: Remove unnecessary address-of operators (Steve Best) [RHEL-129779]
  - rv: Fix handle_task_newtask prototype (Gabriele Monaco) [RHEL-116706]
  - redhat/configs: Enable additional RV monitors on debug kernels (Gabriele Monaco) [RHEL-116706]
  - redhat/configs: Enable sched and rtapp RV monitors (Gabriele Monaco) [RHEL-116706]
  - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Perform fast check switch only for online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Check _CPC validity for only the online CPUs (Mark Langsdorf) [RHEL-151651]
  - ACPI: CPPC: Detect preferred core availability on online CPUs (Mark Langsdorf) [RHEL-151651]
  - redhat/configs: automotive: enable SPI_OMAP24XX as a module (Jared Kangas) [RHEL-118418]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-226.el10]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172216]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172216]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172216] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172216]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172216] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172216] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172216]
  - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171460]
  - drm/i915/dmc: Fix an unlikely NULL pointer deference at probe (Desnes Nunes) [RHEL-161592]
  - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Herbert Xu) [RHEL-154016]
  - s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-168792]
  - timers/migration: Exclude isolated cpus from hierarchy (CKI Backport Bot) [RHEL-68981]
  - cpumask: Add initialiser to use cleanup helpers (CKI Backport Bot) [RHEL-68981]
  - sched/isolation: Force housekeeping if isolcpus and nohz_full don't leave any (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Fail if isolated and nohz_full don't leave any housekeeping (CKI Backport Bot) [RHEL-68981]
  - cgroup/cpuset: Rename update_unbound_workqueue_cpumask() to update_isolation_cpumasks() (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Use scoped_guard on available flag set/clear (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Add mask for CPUs available in the hierarchy (CKI Backport Bot) [RHEL-68981]
  - timers/migration: Rename 'online' bit to 'available' (CKI Backport Bot) [RHEL-68981]
  - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-145403]
  - audit: Use kzalloc() instead of kmalloc()/memset() in audit_krule_to_data() (Ricardo Robaina) [RHEL-145403]
  - audit: fix comment misindentation in audit.h (Ricardo Robaina) [RHEL-145403]
  - audit: fix skb leak when audit rate limit is exceeded (Ricardo Robaina) [RHEL-145403]
  - audit: init ab->skb_list earlier in audit_buffer_alloc() (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple object contexts (Ricardo Robaina) [RHEL-145403]
  - audit: add record for multiple task security contexts (Ricardo Robaina) [RHEL-145403]
  - lsm: security_lsmblob_to_secctx module selection (Ricardo Robaina) [RHEL-145403]
  - audit: create audit_stamp structure (Ricardo Robaina) [RHEL-145403]
  - audit: add a missing tab (Ricardo Robaina) [RHEL-145403]
  - audit: fix typo in auditfilter.c comment (Ricardo Robaina) [RHEL-145403]
  - audit: Replace deprecated strcpy() with strscpy() (Ricardo Robaina) [RHEL-145403]
  - audit: fix indentation in audit_log_exit() (Ricardo Robaina) [RHEL-145403]
  - audit: mark audit_log_vformat() with __printf() attribute (Ricardo Robaina) [RHEL-145403]
  - fs: Fix filename init after recent refactoring (Ricardo Robaina) [RHEL-145403]
  - netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - fs: dedup handling of struct filename init and refcounts bumps (Ricardo Robaina) [RHEL-145403]
  - audit: Initialize lsmctx to avoid memory allocation error (Ricardo Robaina) [RHEL-145403]
  - net: corrections for security_secid_to_secctx returns (Ricardo Robaina) [RHEL-145403]
  - lsm: replace context+len with lsm_context (Ricardo Robaina) [RHEL-145403]
  - lsm: ensure the correct LSM context releaser (Ricardo Robaina) [RHEL-145403]
  - lsm: remove lsm_prop scaffolding (Ricardo Robaina) [RHEL-145403]
  - netlabel,smack: use lsm_prop for audit data (Ricardo Robaina) [RHEL-145403]
  - audit: change context data from secid to lsm_prop (Ricardo Robaina) [RHEL-145403]
  - lsm: create new security_cred_getlsmprop LSM hook (Ricardo Robaina) [RHEL-145403]
  - audit: use an lsm_prop in audit_names (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_inode_getsecid (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_current_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: update shutdown LSM data (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_ipc_getsecid (Ricardo Robaina) [RHEL-145403]
  - audit: maintain an lsm_prop in audit_context (Ricardo Robaina) [RHEL-145403]
  - lsm: add lsmprop_to_secctx hook (Ricardo Robaina) [RHEL-145403]
  - lsm: use lsm_prop in security_audit_rule_match (Ricardo Robaina) [RHEL-145403]
  - lsm: add the lsm_prop data structure (Ricardo Robaina) [RHEL-145403]
  - KVM: arm64: Account for RESx bits in __compute_fgt() (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Fix typos and stale comments in kvm_util (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Move page_align() to shared header (Sebastian Ott) [RHEL-157318]
  - KVM: riscv: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Fix incorrect rounding in page_align() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Disable unused TTBR1_EL1 translations (Sebastian Ott) [RHEL-157318]
  - tools headers: Sync UAPI KVM headers with kernel sources (Sebastian Ott) [RHEL-157318]
  - Documentation: KVM: Update GICv3 docs for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Discard PC update state on vcpu reset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU hotplug (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correct test for ICH_HCR_EL2_TDIR cap for GICv5 hosts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert ICH_HCR_EL2_TDIR cap to EARLY_LOCAL_CPU_FEATURE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove the redundant ISB in __kvm_at_s1e2() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix vma_shift staleness on nested hwpoison path (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Inject a SEA if failed to read the descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Report addrsz fault at level 0 with a bad VTTBR.BADDR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Check S2 limits based on implemented PA size (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly init vgic dist/redist on vgic creation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Deduplicate ASID retrieval code (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revert accidental drop of kvm_uninit_stage2_mmu() for non-NV VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix protected mode handling of pages larger than 4kB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic: Handle const qualifier from gic_kvm_info allocation type (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove redundant kern_hyp_va() in unpin_host_sve_state() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix ID register initialization for non-protected pKVM guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Optimise away S1POE handling when not supported by host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Hide S1POE from guests when not supported by the host (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add debugfs file dumping computed RESx values (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add sanitisation to SCTLR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of HCR_EL2.MIOCNCE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove all traces of FEAT_TME (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of full register invalid constraint (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Get rid of FIXED_VALUE altogether (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify handling of HCR_EL2.E2H RESx (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move RESx into individual register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add RES1_WHEN_E2Hx constraints as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add REQUIRES_E2H1 constraint as configuration flags (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify FIXED_VALUE handling (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert HCR_EL2.RW to AS_RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Correctly handle SCTLR_EL1 RES1 bits for unsupported features (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Allow RES1 bits to be inferred from configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inherit RESx bits from FGT register descriptors (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Extend unified RESx handling to runtime sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce data structure tracking both RES0 and RES1 bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce standalone FGU computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove duplicate configuration for SCTLR_EL1.{EE,E0E} (Sebastian Ott) [RHEL-157318]
  - arm64: Convert SCTLR_EL2 to sysreg infrastructure (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Avoid NV stage-2 code when NV is not supported (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for vgic-debug debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reimplement vgic-debug XArray iteration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use standard seq_file iterator for idregs debugfs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Set vgic_model before initing private IRQs (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Drop ICH_HFGRTR_EL2.ICC_HAPR_EL1 and make RES1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Switch vGIC-v3 to use generated ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix various comments (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Add trap config for DBGWCR<15>_EL1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Enable GICv3 CPUIF trapping on GICv5 hosts if required (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Simplify PAGE_S2_MEMATTR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Kill KVM_PGTABLE_S2_NOFWB (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Switch pKVM host S2 over to KVM_PGTABLE_S2_AS_S1 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add KVM_PGTABLE_S2_AS_S1 flag (Sebastian Ott) [RHEL-157318]
  - arm64: Add MT_S2{,_FWB}_AS_S1 encodings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvm_has_mte() in pKVM trap initialization (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF when accessing MTE sysregs with MTE disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Trap MTE access and discovery when MTE is disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove dead code resetting HCR_EL2 for pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Return correct RES0 bits for FGT registers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Always populate FGT masks at boot time (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix error checking for FFA_VERSION (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Prevent host from managing timer offsets for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Check whether a VM IOCTL is allowed in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Track KVM IOCTLs and their associated KVM caps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Do not allow KVM_CAP_ARM_MTE for any guest in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Include VM type when checking VM capabilities in pKVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Introduce helper to calculate fault IPA offset (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix MTE flag initialization for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trap polarity for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix Trace Buffer trapping for protected VMs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add a test for FEAT_IDST (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Report optional ID register traps with a 0x18 syndrome (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: pkvm: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Force trap of GMID_EL1 when the guest doesn't have MTE (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle CSSIDR2_EL1 and SMIDR_EL1 in a generic way (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle FEAT_IDST for sysregs without specific handlers (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add a generic synchronous exception injection primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add trap routing for GMID_EL1 (Sebastian Ott) [RHEL-157318]
  - arm64: Repaint ID_AA64MMFR2_EL1.IDS description (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Honor UX/PX attributes for EL2 S1 mappings (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Convert VTCR_EL2 to config-driven sanitisation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Account for RES1 bits in DECLARE_FEAT_MAP() and co (Sebastian Ott) [RHEL-157318]
  - arm64: Convert VTCR_EL2 to sysreg infratructure (Sebastian Ott) [RHEL-157318]
  - arm64: Convert ID_AA64MMFR0_EL1.TGRAN{4,16,64}_2 to UnsignedEnum (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix missing <asm/stackpage/nvhe.h> include (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Calculate hyp VA size only once (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Don't blindly set set PSTATE.PAN on guest exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Respect stage-2 write permssion when setting stage-1 AF (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused vcpu_{clear,set}_wfx_traps() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove unused parameter in synchronize_vcpu_pstate() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove extra argument for __pvkm_host_{share,unshare}_hyp() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Inject UNDEF for a register trap without accessor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Copy FGT traps to unprotected pKVM VCPU on VCPU load (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix EL2 S1 XN handling for hVHE setups (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic: Check for vGICv3 when clearing TWI (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Remove ISB after writing FPEXC32_EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Shuffle KVM_HOST_DATA_FLAG_* indices (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix comment in fpsimd_lazy_switch_to_host() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Update AF on software walk only if VM has FEAT_HAFDBS (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: at: Use correct HA bit in TCR_EL2 when regime is EL2 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Document KVM_PGTABLE_PROT_{UX,PX} (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix spelling mistake "Unexpeced" -> "Unexpected" (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add break to default case in kvm_pgtable_stage2_pte_prot() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add endian casting to kvm_swap_s[12]_desc() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Fix compilation when CONFIG_ARM64_USE_LSE_ATOMICS=n (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Add test for AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Expose hardware access flag management to NV guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Implement HW access flag management in stage-2 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Implement HW access flag management in stage-1 SW PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Propagate PTW errors up to AT emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add helper for swapping guest descriptor (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Use pgtable definitions in stage-2 walk (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Handle endianness in read helper for emulated PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Stop passing vCPU through void ptr in S2 PTW (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Call helper for reading descriptors directly (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: nv: Advertise support for FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Teach ptdump about FEAT_XNX permissions (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Consider all 7 possible levels of cache (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: Remove ARM64_FEATURE_FIELD_BITS and its last user (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add timer deactivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add Group-0 enable test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Add asymmetric SPI deaectivation test (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Perform EOImode==1 deactivation in ack order (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Remove LR-bound limitation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Exclude timer-controlled interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Change configuration before enabling interrupt (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: vgic_irq: Fix GUEST_ASSERT_IAR_EMPTY() helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Disable Group-0 interrupts by default (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: selftests: gic_v3: Add irq group setting helper (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Always trap GICV_DIR register (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle deactivation via GICV_DIR traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Force exit to sync ICH_HCR_EL2.En (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Plug L1 LR sync into deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: nv: Resync LRs/VMCR/HCR early for better MI emulation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Avoid broadcast kick on CPUs lacking TDIR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle in-LR deactivation when possible (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add SPI tracking to handle asymmetric deactivation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Set ICH_HCR_EL2.TDIR when interrupts overflow LR capacity (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Add GICv2 SGI handling to deactivation primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle deactivation via ICV_DIR_EL1 traps (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Handle LR overflow when EOImode==0 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use MI to detect groups being enabled/disabled (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Move undeliverable interrupts to the end of ap_list (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Invert ap_list sorting to push active interrupts out (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Make vgic_target_oracle() globally available (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn kvm_vgic_vcpu_enable() into kvm_vgic_vcpu_reset() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Revamp vgic maintenance interrupt configuration (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Eagerly save VMCR on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Compute vgic state irrespective of the number of interrupts (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Decouple GICH_HCR programming from LRs being loaded (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv2: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR computing primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Extract LR folding primitive (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Decouple ICH_HCR_EL2 programming from LRs (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Preserve EOIcount on exit (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Drop LPI active state when folding LRs (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Add missing GICH_HCR control bits (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add LR overflow handling documentation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add tracking of vgic_irq being present in a LR (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Repack struct vgic_irq fields (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: GICv3: Detect and work around the lack of ICV_DIR_EL1 trapping (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Turn vgic-v3 errata traps into a patched-in constant (Sebastian Ott) [RHEL-157318]
  - irqchip/gic: Expose CPU interface VA to KVM (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Add support for FEAT_XNX stage-2 permissions (Sebastian Ott) [RHEL-157318]
  - arm64: Detect FEAT_XNX (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Split kvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Only drop references on empty tables in stage2_free_walker (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: Assert GICR_TYPER.Processor_Number matches selftest CPU number (Sebastian Ott) [RHEL-157318]
  - KVM: selftests: SYNC after guest ITS setup in vgic_lpi_stress (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use kvzalloc() for kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Drop useless __GFP_HIGHMEM from kvm struct allocation (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Add ICH_VMCR_EL2 (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Move generation of RES0/RES1/UNKN to function (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Support feature-specific fields with 'Prefix' descriptor (Sebastian Ott) [RHEL-157318]
  - arm64/sysreg: Fix checks for incomplete sysreg definitions (Sebastian Ott) [RHEL-157318]
  - Documentation: kvm: new UAPI for handling SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: selftests: Test for KVM_EXIT_ARM_SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: VM exit to userspace to handle SEA (Sebastian Ott) [RHEL-133965 RHEL-157318]
  - KVM: arm64: vgic-v3: Trap all if no in-kernel irqchip (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v3: Only set ICH_HCR traps for v2-on-v3 or v3 guests (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Enable nested for GICv5 host with FEAT_GCIE_LEGACY (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: Use ARM64_HAS_GICV5_LEGACY for GICv5 probing (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Probe for GICv5 (Sebastian Ott) [RHEL-157318]
  - KVM: arm64: gic-v5: Support GICv3 compat (Sebastian Ott) [RHEL-157318]
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Ricardo Robaina) [RHEL-144438]
  - wifi: ath10k: fix station lookup failure during disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cw1200: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct use sequence of driver_data in skb->info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: pause TCM on fast resume (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: cancel mlo_scan_start_wk (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly decode TTLM with default link map (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: ignore link disabled flag from userspace (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: apply advertised TTLM from association response (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: parse all TTLM entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't perform DA check on S1G beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix wrong P2P device link id issue (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dead lock while flushing management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix scan state stuck in ABORTING after cancel_remain_on_channel (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: cancel scan only on active scan vdev (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: correctly check if CSA is active (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: don't force radio frequency check in freq_to_idx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: collect station statistics earlier when disconnect (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: restore non-chanctx injection behaviour (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: disable BHs for hwsim_radio_lock (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't iterate not running interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: avoid kernel-infoleak from struct iw_point (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Remove blank line after mt792x firmware version dmesg (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: Strip whitespace from build ddate" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: do not use old MBSSID elements (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: don't WARN for connections on invalid channels (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: allow sharing identical chanctx for S1G interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when comparing chandefs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: include s1g_primary_2mhz when sending chandef (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: correct FILS status codes (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Strip whitespace from build ddate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip ieee80211_iter_keys() on scanning link remove (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: skip deflink accounting for offchannel links (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: move mt7996_update_beacons under mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: ensure the 6GHz A-MPDU density cap from the hardware. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix EMI rings for RRO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLO set key and group key issues (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix MLD group index assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: use correct link_id when filling TXD and TXP (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: set link_valid field when initializing wcid (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix teardown command for an MLD peer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: support fixed rate for link station (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix implicit beamforming support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: no need to wait ACK event for SDO command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix max nss value when getting rx chainmask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7925: cqm rssi low/high event notify (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: replace use of system_wq with system_percpu_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: adjust BSS conf pointer handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - Revert "wifi: mt76: mt792x: improve monitor interface handling" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mmio_*_copy fix byte order and alignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Use of_reserved_mem_region_to_resource() for "memory-region" (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix typos in comments (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add the capability to set TX token start ID (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Add mt76_dev pointer in mt76_queue struct. (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Move Q_READ/Q_WRITE definitions in dma.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove useless check in mt7996_msdu_page_get_from_cache() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: relicense to BSD-3-Clause-Clear (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: fix license/copyright of util.h (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: use GFP_DMA32 for page_pool buffer allocation (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7915: add bf backoff limit table support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: Fix DTS power-limits on little endian systems (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: connac: Replace memcpy + hard-coded size with strscpy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: Remove unnecessary link_id checks in mt7996_tx (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: stop radar detection in cfg80211_leave() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use cfg80211_leave() in iftype change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix channel switching code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Enable 40 MHz width by default (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix RX channel width reported by RTL8192FU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix the 40 MHz subchannel for RTL8192EU, RTL8723BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Make RTL8192CU, RTL8723AU TX with 40 MHz width (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: correct field mask of reset DAC/ADC FIFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC packet handlers (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: refactor CMAC crypt functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: utilize the newly defined CMAC constants (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add generic MMIE struct defines (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix CMAC functions not handling errors (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add support for 6GHz AP role not relevant AP type (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add default ID 0bda:b831 for RTL8831BU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use separated function to set RX filter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: correct user macid mask of RX info for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: update format of addr cam H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: add addr cam H2C command v1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill addr cam H2C command by struct (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: align RA H2C format v1 for RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: print band and port where beacon update on (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: ignore DCFO if not defined in chip_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: consider type 15 in BB gain table (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: update wcpu_on to download firmware for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: remove undefined bit B_BE_PPDU_MAC_INFO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: calling BB pre-init by chips with/without BB MCU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mac: separate pre-init code before downloading firmware (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: part size to download firmware by header info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: flush TX queue before deleting key (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: rtw8852bu: Added dev id for ASUS AX57 NANO USB Wifi dongle (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: configure RX antenna if chips can support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: do RF calibration once setting channel when running pure monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: consider data rate/bandwidth/GI for injected packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: phy: fix out-of-bounds access in rtw89_phy_read_txpwr_limit() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: add compensation of thermal value from efuse calibration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: debug: add parser to diagnose along DIAG_MAC fw element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fw: parse firmware element of DIAG_MAC (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: pci: add to read PCI configuration space from common code (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make monitor link info check more specific (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: track MU-MIMO configuration on disabled interfaces (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: Add fallback mechanism for INDOOR_SP connection (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: clean up duplicate ap_power handling (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: use a C99 initializer in wiphy_register (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtlwifi: rtl8188ee: correct allstasleep in P2P PS H2C command (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852au module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852au.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852a: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852a_dle_mem_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Use the correct power sequences for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix doc of struct key_params (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove unnecessary vlan NULL check (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: pass frame type to element parsing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove "disabling VHT" message (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add and use chanctx usage iteration (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: simplify ieee80211_recalc_chanctx_min_def() API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: remove chanctx to link back-references (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: make link iteration safe for 'break' (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split NAN definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split P2P definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split S1G definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split EHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HE definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split VHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split HT definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ieee80211: split mesh definitions out (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix timeout error during beacon stats retrieval (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Make firmware stats reset caller-driven (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: process TX wait skbs for USB via C2H handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: provide TX reports for management frames (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: handle IEEE80211_TX_CTL_REQ_TX_STATUS frames for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: anchor TX URBs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: fill TX descriptor of FWCMD in shortcut (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: implement C2H TX report handler (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: refine rtw89_core_tx_wait_complete() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use ieee80211_free_txskb() where appropriate (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: fix leak in rtw89_usb_write_port() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add BUFFALO WI-U3-866DHP to the USB ID list (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: 8822c: use fixed rate and bandwidth to reply CSI packets (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Enable the new rtw89_8852cu module (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852cu.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw8852c_dle_mem_usb{2,3} (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: Fix rtw8852c_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Fix rtw89_mac_dmac_func_pre_en_ax() for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_post_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_pre_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: usb: Move bulk out map to new struct rtw89_usb_info (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Add rtw89_core_get_ch_dma_v2() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8832cu: turn off TX partial mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize bmi_target_info instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: use = {} to initialize pm_qos_request instead of memset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: unassign arvif on scan vdev create failure (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: enforce vdev limit in ath12k_mac_vdev_create() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Set EHT fixed rates for associated STAs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rates to ath12k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT fixed GI/LTF (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add EHT MCS/NSS rates to Peer Assoc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add EHT rate handling to existing set rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: generalize GI and LTF fixed rate functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix error handling in creating hardware group (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix reusing m3 memory (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: Allow HT Action frame processing on 6 GHz when HE is supported (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: add nvmem eeprom support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: add RX flag to report radiotap VHT information (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload() (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check for NULL pointer after kmalloc (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: fix a few device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: Move EMLSR prints to IWL_DL_EHT (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: disable EHT if the device doesn't allow it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: use FW_CHECK on bad ROC notification (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm/mld: report non-HT frames as 20 MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix build when mvm/mld not configured (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: stop checking the firmware's error pointer (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: be more chatty when we fail to find a wifi7 device (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fw: remove support of several iwl_lari_config_change_cmd versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: include raw PHY notification in radiotap (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: update to new sniffer API (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: set wiphy::iftype_ext_capab dynamically (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: support get/set_antenna (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: cleanup unsupported phy command versions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: fix remaining kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: tests: check listed PCI IDs have configs (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: cfg: add new device names (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: iwlmld is always used for wifi7 devices (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mvm: move rate conversions to utils.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: reschedule check_tpt_wk also not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: mld: remove support from of alive notif version 6 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: iwlwifi: align the name of iwl_alive_ntf_v6 to the convention (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: improve scan time on 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: restart hardware to recover firmware if power-save becomes abnormal (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: 8852c: fix ADC oscillation in 160MHz affecting RX performance (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: regd: apply ACPI policy even if country code is programmed (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: support EHT rate pattern via bitrate mask (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: mlo: handle needed H2C when link switching is requested by stack (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: use skb_dequeue() for queued ROC packets to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: splice C2H events queue to local to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add parameters to radio-specific debugfs directories (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: Add debugfs support for multi-radio wiphy (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211: default S1G chandef width to 1MHz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: get probe response chan via ieee80211_get_channel_khz (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211: reset CRC valid after CSA (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: mac80211_hwsim: advertise puncturing feature support (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: cfg80211/mac80211: validate radio frequency range for monitor mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rt2x00: check retval for of_get_mac_address (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Assert base_lock is held before allocating REO update element (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: add support for BSS color change (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Correctly use "ab" macro parameter (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: advertise NL80211_FEATURE_TX_POWER_INSERTION (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: add support for Tx Power insertion in RRM action frame (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: wrap ath11k_mac_op_get_txpower() with lock-aware internal helper (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: relocate some Tx power related functions in mac.c (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix peer HE MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: Support for FTM TLV test commands (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Use correct power off sequence for RTL8192CU (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Dump the efuse right after reading it (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Report the signal strength only if it's known (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw89: Replace hardcoded strings with helper functions (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Add MODULE_FIRMWARE() entries (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix TX and RX MCS rate configurations in HE mode (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix NSS value update in ext_rx_stats (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Defer vdev bring-up until CSA finalize to avoid stale beacon (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: track dropped MSDU buffer type packets in REO exception ring (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Fix MSDU buffer types handling in RX error path (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath12k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath11k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - wifi: ath10k: move recovery check logic into a new work (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-145612]
  - selftests: net: unify the Makefile formats (Hangbin Liu) [RHEL-155384]
  - selftests: net: sort configs (Hangbin Liu) [RHEL-155384]
  - lib/test_vmalloc.c: minor fixes to test_vmalloc.c (Audra Mitchell) [RHEL-151432]
  - kselftest: mm: fix typos in test_vmalloc.sh (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: remove xfail condition check (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc: add no_block_alloc_test case (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: introduce xfail for failing tests (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: restrict default test mask to avoid test warnings (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: use late_initcall() if built-in for init ordering (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: allow built-in execution (Audra Mitchell) [RHEL-151432]
  - lib/test_vmalloc.c: replace RWSEM to SRCU for setup (Audra Mitchell) [RHEL-151432]
  - bus: mhi: host: pci_generic: Add Foxconn T99W760 modem (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support (Jose Ignacio Tornos Martinez) [RHEL-151312]
  - bus: mhi: ep: Make mhi_ep_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-151312]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-226
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-226
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - rxrpc: linearize incoming DATA packet when it has paged frags


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-227.el10]
changelog:
  - PCI/PTM: Drop pci_enable_ptm() granularity parameter (CKI Backport Bot) [RHEL-172222]
  - x86/mce: Remove the redundant mce_hygon_feature_init() (Steve Best) [RHEL-130026]
  - x86/mce: Ensure user polling settings are honored when restarting timer (Steve Best) [RHEL-130026]
  - x86/mce/amd: Fix threshold limit reset (Steve Best) [RHEL-130026]
  - x86/mce/apei: Handle variable SMCA BERT record size (Steve Best) [RHEL-130026]
  - x86/mce/mcelog: Use xchg() to get and clear the flags (Steve Best) [RHEL-130026]
  - x86/mce/inject: Remove call to mce_notify_irq() (Steve Best) [RHEL-130026]
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Steve Best) [RHEL-130026]
  - x86/mce/threshold: Remove the redundant this_cpu_dec_return() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients (Steve Best) [RHEL-130026]
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs (Steve Best) [RHEL-130026]
  - x86/mce: Handle AMD threshold interrupt storms (Steve Best) [RHEL-130026]
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Add support for physical address valid bit (Steve Best) [RHEL-130026]
  - EDAC/mce_amd: Add support for FRU text in MCA (Steve Best) [RHEL-130026]
  - x86/mce: Save and use APEI corrected threshold limit (Steve Best) [RHEL-130026]
  - x86/mce/amd: Define threshold restart function for banks (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove redundant reset_block() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Support SMCA Corrected Error Interrupt (Steve Best) [RHEL-130026]
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD DFR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Steve Best) [RHEL-130026]
  - x86/mce: Unify AMD THR handler with MCA Polling (Steve Best) [RHEL-130026]
  - x86/mce: Add a clear_bank() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()' (Steve Best) [RHEL-130026]
  - x86/mce: Move machine_check_poll() status checks to helper functions (Steve Best) [RHEL-130026]
  - x86/mce: Separate global and per-CPU quirks (Steve Best) [RHEL-130026]
  - x86/mce: Convert family/model mixed checks to VFM-based checks (Steve Best) [RHEL-130026]
  - x86/mce: Do 'UNKNOWN' vendor check early (Steve Best) [RHEL-130026]
  - x86/mce: Break up __mcheck_cpu_apply_quirks() (Steve Best) [RHEL-130026]
  - x86/mce: Make four functions return bool (Steve Best) [RHEL-130026]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only SMCA init (Steve Best) [RHEL-130026]
  - x86/mce: Define BSP-only init (Steve Best) [RHEL-130026]
  - x86/mce: Set CR4.MCE last during init (Steve Best) [RHEL-130026]
  - x86/mce: Remove __mcheck_cpu_init_early() (Steve Best) [RHEL-130026]
  - x86/mce: Cleanup bank processing on init (Steve Best) [RHEL-130026]
  - x86/mce/amd: Put list_head in threshold_bank (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove smca_banks_map (Steve Best) [RHEL-130026]
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device() (Steve Best) [RHEL-130026]
  - x86/mce/amd: Rename threshold restart function (Steve Best) [RHEL-130026]
  - x86/msr: Convert __rdmsr() uses to native_rdmsrq() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Convert __wrmsr() uses to native_wrmsr{,q}() uses [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Add the native_rdmsrq() helper (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'native_wrmsrl()' to 'native_wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()' (Steve Best) [RHEL-130026]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on 'u32' MSR indices in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Standardize on u64 in <asm/msr.h> (Steve Best) [RHEL-130026]
  - x86/msr: Harmonize the prototype and definition of do_trace_rdpmc() (Steve Best) [RHEL-130026]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161187]
  - io_uring/kbuf: limit legacy provided buffer lists to USHRT_MAX (Jeff Moyer) [RHEL-161187]
  - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-167985]
  - platform/x86/intel/pmc: Remove double empty line (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Enable substate residencies for multiple PMCs (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Move LPM mode attributes to PMC (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Change LPM mode fields to u8 (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Improve function to show substate header (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (Steve Best) [RHEL-129781]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (Steve Best) [RHEL-129781]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (Steve Best) [RHEL-129781]
  - redhat: configs: Enable CONFIG_SENSORS_SPD5118 (Jennifer Berringer) [RHEL-168906]
  - i3c: master: dw-i3c: Balance PM runtime usage count on probe failure (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Detect and support 16-bit register addressing (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Support 16-bit addressing for NVMEM accesses (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Name chips taking the specification literally (Jennifer Berringer) [RHEL-168906]
  - hwmon: (spd5118) Split into common and I2C specific code (Jennifer Berringer) [RHEL-168906]
  - hwmon: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Disable runtime PM on Agilex5 to avoid bus hang on IBI (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add shutdown support to dw_i3c_master driver (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add quirk to address OD/PP timing issue on AMD platform (Jennifer Berringer) [RHEL-168906]
  - i3c: dw: Add support for AMDI0015 ACPI ID (Jennifer Berringer) [RHEL-168906]
  - i3c: simplify combined i3c/i2c dependencies (Jennifer Berringer) [RHEL-168906]
  - i3c: Move device name assignment after i3c_bus_init (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Simplify with scoped for each OF child loop (Jennifer Berringer) [RHEL-168906]
  - i3c: fix refcount inconsistency in i3c_master_register (Jennifer Berringer) [RHEL-168906]
  - device property: Add scoped fwnode child node iterators (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Drop duplicate check before calling OF APIs (Jennifer Berringer) [RHEL-168906]
  - i3c: master: Improve initialization of numbered I2C adapters (Jennifer Berringer) [RHEL-168906]
  - thermal: intel: int340x: soc_slider: Set offset only for balanced mode (Steve Best) [RHEL-130009]
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure (Steve Best) [RHEL-130009]
  - drivers: thermal: intel: tcc_cooling: Drop redundant local variable (Steve Best) [RHEL-130009]
  - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (Steve Best) [RHEL-130009]
  - thermal: intel: Use sysfs_emit() in a sysfs show function (Steve Best) [RHEL-130009]
  - thermal: intel: fix typo "nagative" in comment for cpu argument (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use sysfs_emit{_at}() in sysfs show functions (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Enable slow workload type hints (Steve Best) [RHEL-130009]
  - thermal: intel: intel_pch_thermal: Drop explicit driver data clearing (Steve Best) [RHEL-130009]
  - thermal: intel: intel_tcc_cooling: Add CPU models in the support list (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Wildcat Lake (Steve Best) [RHEL-130009]
  - ACPI: DPTF: Support Nova Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add DLVR support for Nova Lake (Steve Best) [RHEL-130009]
  - thermal: int340x: processor_thermal: Add Nova Lake processor thermal device (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Use symbolic constant for UUID comparison (Steve Best) [RHEL-130009]
  - thermal: intel: Select INT340X_THERMAL from INTEL_SOC_DTS_THERMAL (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Power Slider: Validate slider_balance range (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter to change slider offset (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add module parameter for balanced Slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Enable power slider interface for Panther Lake (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Add support for power slider (Steve Best) [RHEL-130009]
  - thermal: intel: int340x: Remove redundant acpi_has_method() call (Steve Best) [RHEL-130009]
  - tools/power/x86/intel-speed-select: v1.25 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Allow non root users (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Optimize suspend/resume callbacks (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Check for admin capability for write commands (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Store and restore all domains data (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86: ISST: Add missing write block check (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Use pkg-config for libnl-3.0 detection (Krzysztof Pawlinski) [RHEL-133093]
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: v1.24 release (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Reset isst_turbo_freq_info for invalid buckets (Krzysztof Pawlinski) [RHEL-133093]
  - tools/power/x86/intel-speed-select: Check feature status (Krzysztof Pawlinski) [RHEL-133093]
  - rh_message.h: update support status of mlx5 devices (Scott Weaver) [RHEL-142605 RHEL-142608 RHEL-166116]
  - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (Charles Mirabile) [RHEL-154155]
  - x86/resctrl: Fix SNC detection (Phil Auld) [RHEL-147186]
  - x86/topo: Fix SNC topology mess (Phil Auld) [RHEL-147186]
  - x86/topo: Replace x86_has_numa_in_package (Phil Auld) [RHEL-147186]
  - x86/topo: Add topology_num_nodes_per_package() (Phil Auld) [RHEL-147186]
  - x86/numa: Store extra copy of numa_nodes_parsed (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Phil Auld) [RHEL-145610]
  - sched/core: Fix wakeup_preempt's next_class tracking (Phil Auld) [RHEL-147186]
  - sched/fair: Only set slice protection at pick time (Phil Auld) [RHEL-147186]
  - sched/eevdf: Update se->vprot in reweight_entity() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix lag clamp (Phil Auld) [RHEL-147186]
  - sched/fair: Fix zero_vruntime tracking (Phil Auld) [RHEL-147186]
  - sched/clock: Avoid false sharing for sched_clock_irqtime (Phil Auld) [RHEL-147186]
  - sched/rt: Skip currently executing CPU in rto_next_cpu() (Phil Auld) [RHEL-147186]
  - sched/cpufreq: Use %pe format for PTR_ERR() printing (Phil Auld) [RHEL-147186]
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups (Phil Auld) [RHEL-147186]
  - sched/debug: Fix dl_server (re)start conditions (Phil Auld) [RHEL-147186]
  - sched/debug: Add support to change sched_ext server params (Phil Auld) [RHEL-147186]
  - sched_ext: Add a DL server for sched_ext tasks (Phil Auld) [RHEL-147186]
  - sched/debug: Stop and start server based on if it was active (Phil Auld) [RHEL-147186]
  - sched/deadline: Clear the defer params (Phil Auld) [RHEL-147186]
  - sched/debug: Fix updating of ppos on server write ops (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix 'stuck' dl_server (Phil Auld) [RHEL-147186]
  - sched/fair: Revert force wakeup preemption (Phil Auld) [RHEL-147186]
  - sched/fair: Disable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched: Update rq->avg_idle when a task is moved to an idle CPU (Phil Auld) [RHEL-147186]
  - sched/debug: Convert copy_from_user() + kstrtouint() to kstrtouint_from_user() (Phil Auld) [RHEL-147186]
  - sched/fair: Fix pelt clock sync when entering idle (Phil Auld) [RHEL-147186]
  - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (Phil Auld) [RHEL-147186]
  - sched/fair: Change likelyhood of nohz.nr_cpus (Phil Auld) [RHEL-147186]
  - sched/fair: Fix math notation errors in avg_vruntime comment (Phil Auld) [RHEL-147186]
  - sched/fair: Move checking for nohz cpus after time check (Phil Auld) [RHEL-147186]
  - sched: Audit MOVE vs balance_callbacks (Phil Auld) [RHEL-147186]
  - sched: Deadline has dynamic priority (Phil Auld) [RHEL-147186]
  - sched/deadline: Use ENQUEUE_MOVE to allow priority change (Phil Auld) [RHEL-147186]
  - sched/deadline: Ensure get_prio_dl() is up-to-date (Phil Auld) [RHEL-147186]
  - sched/deadline: Avoid double update_rq_clock() (Phil Auld) [RHEL-147186]
  - sched: Fold rq-pin swizzle into __balance_callbacks() (Phil Auld) [RHEL-147186]
  - sched: Provide idle_rq() helper (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix server stopping with runnable tasks (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix potential race in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/deadline: Remove unnecessary comment in dl_add_task_root_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Drop useless cpumask_empty() in find_energy_efficient_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Simplify task_numa_find_cpu() (Phil Auld) [RHEL-147186]
  - sched/fair: Use cpumask_weight_and() in sched_balance_find_dst_group() (Phil Auld) [RHEL-147186]
  - sched: Reorder some fields in struct rq (Phil Auld) [RHEL-147186]
  - sched/fair: Fix sched_avg fold (Phil Auld) [RHEL-147186]
  - sched: Fix faulty assertion in sched_change_end() (Phil Auld) [RHEL-147186]
  - sched/core: Rework sched_class::wakeup_preempt() and rq_modified_*() (Phil Auld) [RHEL-147186]
  - sched_ext: Rename pnt_seq to kick_sync (Phil Auld) [RHEL-147186]
  - sched_ext: Don't kick CPUs running higher classes (Phil Auld) [RHEL-147186]
  - sched_ext: Fix SCX_KICK_WAIT to work reliably (Phil Auld) [RHEL-147186]
  - sched_ext: Allow forcibly picking an scx task (Phil Auld) [RHEL-147186]
  - sched_ext: fix flag check for deferred callbacks (Phil Auld) [RHEL-147186]
  - sched/ext: Fold balance_scx() into pick_task_scx() (Phil Auld) [RHEL-147186]
  - sched_ext: defer queue_balance_callback() until after ops.dispatch (Phil Auld) [RHEL-147186]
  - sched_ext: Move internal type and accessor definitions to ext_internal.h (Phil Auld) [RHEL-147186]
  - sched_ext: Make explicit scx_task_iter_relock() calls unnecessary (Phil Auld) [RHEL-147186]
  - sched/fair: Join two #ifdef CONFIG_FAIR_GROUP_SCHED blocks (Phil Auld) [RHEL-147186]
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics (Phil Auld) [RHEL-147186]
  - sched/fair: Sort out 'blocked_load*' namespace noise (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions (Phil Auld) [RHEL-147186]
  - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight (Phil Auld) [RHEL-147186]
  - sched/fair: Clean up comments in 'struct cfs_rq' (Phil Auld) [RHEL-147186]
  - sched/fair: Fold the sched_avg update (Phil Auld) [RHEL-147186]
  - <linux/compiler_types.h>: Add the __signed_scalar_typeof() helper (Phil Auld) [RHEL-147186]
  - sched/fair: Remove superfluous rcu_read_lock() (Phil Auld) [RHEL-147186]
  - sched/fair: Avoid rq->lock bouncing in sched_balance_newidle() (Phil Auld) [RHEL-147186]
  - sched/fair: Switch to rcu_dereference_all() (Phil Auld) [RHEL-147186]
  - sched/headers: Rename rcu_dereference_check_sched_domain() => rcu_dereference_sched_domain() (Phil Auld) [RHEL-147186]
  - sched/fair: Limit hrtick work (Phil Auld) [RHEL-147186]
  - sched/core: Add assertions to QUEUE_CLASS (Phil Auld) [RHEL-147186]
  - sched/core: Fix psi_dequeue() for Proxy Execution (Phil Auld) [RHEL-147186]
  - sched/headers: Remove whitespace noise from kernel/sched/sched.h (Phil Auld) [RHEL-147186]
  - sched/rt: Remove a preempt-disable section in rt_mutex_setprio() (Phil Auld) [RHEL-147186]
  - sched/deadline: Walk up cpuset hierarchy to decide root domain when hot-unplug (Phil Auld) [RHEL-147186]
  - cgroup/cpuset: Introduce cpuset_cpus_allowed_locked() (Phil Auld) [RHEL-147186]
  - sched/fair: Enable scheduler feature NEXT_BUDDY (Phil Auld) [RHEL-147186]
  - sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals (Phil Auld) [RHEL-147186]
  - sched/deadline: Use cpumask_weight_and() in dl_bw_cpus (Phil Auld) [RHEL-147186]
  - sched/deadline: Minor cleanup in select_task_rq_dl() (Phil Auld) [RHEL-147186]
  - sched/deadline: Document dl_server (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server stop condition (Phil Auld) [RHEL-147186]
  - sched/eevdf: Fix min_vruntime vs avg_vruntime (Phil Auld) [RHEL-147186]
  - sched: Fix proxy/current (push,pull)ability (Phil Auld) [RHEL-147186]
  - sched: Start blocked_on chain processing in find_proxy_task() (Phil Auld) [RHEL-147186]
  - sched: Add an initial sketch of the find_proxy_task() function (Phil Auld) [RHEL-147186]
  - sched: Fix runtime accounting w/ split exec & sched contexts (Phil Auld) [RHEL-147186]
  - sched: Move update_curr_task logic into update_curr_se (Phil Auld) [RHEL-147186]
  - configs: Make sure PROXY_EXEC is off (Phil Auld) [RHEL-147186]
  - sched: Add CONFIG_SCHED_PROXY_EXEC & boot argument to enable/disable (Phil Auld) [RHEL-147186]
  - locking/mutex: Rework task_struct::blocked_on (Phil Auld) [RHEL-147186]
  - sched/core: Remove double update_rq_clock() in __set_cpus_allowed_ptr_locked() (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-147186]
  - sched/core: Optimize core cookie matching check (Phil Auld) [RHEL-147186]
  - sched/core: Add comment explaining force-idle vruntime snapshots (Phil Auld) [RHEL-147186]
  - sched/proxy: Yield the donor task (Phil Auld) [RHEL-147186]
  - sched: Fix the do_set_cpus_allowed() locking fix (Phil Auld) [RHEL-147186]
  - sched: Remove never used code in mm_cid_get() (Phil Auld) [RHEL-147186]
  - sched: Detect per-class runqueue changes (Phil Auld) [RHEL-147186]
  - sched: Add support to pick functions to take rf (Phil Auld) [RHEL-147186]
  - sched: Match __task_rq_{,un}lock() (Phil Auld) [RHEL-147186]
  - sched: Mandate shared flags for sched_change (Phil Auld) [RHEL-147186]
  - sched: Cleanup the sched_change NOCLOCK usage (Phil Auld) [RHEL-147186]
  - sched: Make __do_set_cpus_allowed() use the sched_change pattern (Phil Auld) [RHEL-147186]
  - sched: Rename do_set_cpus_allowed() (Phil Auld) [RHEL-147186]
  - sched: Add locking comments to sched_class methods (Phil Auld) [RHEL-147186]
  - sched: Move sched_class::prio_changed() into the change pattern (Phil Auld) [RHEL-147186]
  - sched: Fix do_set_cpus_allowed() locking (Phil Auld) [RHEL-147186]
  - sched: Fix migrate_disable_switch() locking (Phil Auld) [RHEL-147186]
  - sched/deadline: Prepare for switched_from() change (Phil Auld) [RHEL-147186]
  - sched: Cleanup sched_delayed handling for class switches (Phil Auld) [RHEL-147186]
  - sched: Fold sched_class::switch{ing,ed}_{to,from}() into the change pattern (Phil Auld) [RHEL-147186]
  - sched/fair: Only update stats for allowed CPUs when looking for dst group (Phil Auld) [RHEL-147186]
  - sched: Employ sched_change guards (Phil Auld) [RHEL-147186]
  - cleanup: Fix documentation build error for ACQUIRE updates (Phil Auld) [RHEL-147186]
  - tools/testing: add linux/args.h header and fix radix, VMA tests (Phil Auld) [RHEL-147186]
  - cleanup: Introduce ACQUIRE() and ACQUIRE_ERR() for conditional locks (Phil Auld) [RHEL-147186]
  - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Phil Auld) [RHEL-147186]
  - sched: Re-arrange the {EN,DE}QUEUE flags (Phil Auld) [RHEL-147186]
  - sched/topology,x86: Fix build warning (Phil Auld) [RHEL-147186]
  - sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode (Phil Auld) [RHEL-147186]
  - sched/fair: Forfeit vruntime on yield (Phil Auld) [RHEL-147186]
  - sched/deadline: only set free_cpus for online runqueues (Phil Auld) [RHEL-147186]
  - sched: Create architecture specific sched domain distances (Phil Auld) [RHEL-147186]
  - sched/deadline: Fix race in push_dl_task() (Phil Auld) [RHEL-147186]
  - vfio/nvgrace-gpu: register device memory for poison handling (Aristeu Rozanski) [RHEL-73608]
  - mm: add stubs for PFNMAP memory failure registration functions (Aristeu Rozanski) [RHEL-73608]
  - mm: fixup pfnmap memory failure handling to use pgoff (Aristeu Rozanski) [RHEL-73608]
  - mm: handle poisoning of pfn without struct pages (Aristeu Rozanski) [RHEL-73608]
  - mm: change ghes code to allow poison of non-struct pfn (Aristeu Rozanski) [RHEL-73608]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-227
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
  - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
  - net: skbuff: propagate shared-frag marker through pskb_copy()


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-227
changelog:
  - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe backport
    of upstream 31e62c2ebbfd, Qualys Security Advisory)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
changelog:
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
  - s390/barrier: Make array_index_mask_nospec() __always_inline (Ramesh Chhetri) [RHEL-174629]
  - s390/entry: Scrub r12 register on kernel entry (Ramesh Chhetri) [RHEL-174629]
  - bitmap: introduce bitmap_weighted_xor() (Michal Schmidt) [RHEL-174745]
  - bitmap: add test_zero_nbits() (Michal Schmidt) [RHEL-174745]
  - bitmap: exclude nbits == 0 cases from bitmap test (Michal Schmidt) [RHEL-174745]
  - bitmap: test bitmap_weight() for more (Michal Schmidt) [RHEL-174745]
  - bitmap: add bitmap_weight_from() (Michal Schmidt) [RHEL-174745]
  - bitmap: align test_bitmap output (Michal Schmidt) [RHEL-174745]
  - bitmap: switch test to scnprintf("%*pbl") (Michal Schmidt) [RHEL-174745]
  - bitmap: Add test for out-of-boundary modifications for scatter & gather (Michal Schmidt) [RHEL-174745]
  - cpumask: Introduce cpumask_weighted_or() (Michal Schmidt) [RHEL-174745]
  - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Michal Schmidt) [RHEL-174745]
  - bitmap: remove _check_eq_u32_array (Michal Schmidt) [RHEL-174745]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-172305]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-172305]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172748] {CVE-2026-43051}
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164228]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164228]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164228]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164228]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164228]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164228]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164228]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164228]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164228]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100932]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100932]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100932]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100932]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100932]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100932]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100932]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100932]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100932]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100932]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100932]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100932]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100932]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100932]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100932]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100932]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100932]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100932]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100932]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100932]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100932]
  - s390/pfault: Fix virtual vs physical address confusion (Mircea Dragan) [RHEL-170908]
  - lib/vsprintf: Add specifier for printing struct timespec64 (CKI Backport Bot) [RHEL-172105]
  - RDMA/rw: Fix MR pool exhaustion in bvec RDMA READ path (Kamal Heib) [RHEL-163515]
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Import DMA-BUF module in uverbs_std_types_dmabuf file (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check id_priv->restricted_node_type in cma_listen_on_dev() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: select CONFIG_DMA_SHARED_BUFFER (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add DMABUF object type and operations (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Support external FD uobjects (Kamal Heib) [RHEL-163515]
  - RDMA/core: introduce rdma_restrict_node_type() (Kamal Heib) [RHEL-163515]
  - RDMA/umem: don't abuse current->group_leader (Kamal Heib) [RHEL-163515]
  - IB/core: Extend rate limit support for RC QPs (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163515]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163515]
  - RDMA/core: add MR support for bvec-based RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: use IOVA-based DMA mapping for bvec RDMA operations (Kamal Heib) [RHEL-163515]
  - RDMA/core: add bio_vec based RDMA read/write API (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163515]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163515]
  - RDMA/core: Avoid exporting module local functions and remove not-used ones (Kamal Heib) [RHEL-163515]
  - RDMA/umem: Remove redundant DMABUF ops check (Kamal Heib) [RHEL-163515]
  - IB/core: Add query_port_speed verb (Kamal Heib) [RHEL-163515]
  - IB/core: Refactor rate_show to use ib_port_attr_to_rate() (Kamal Heib) [RHEL-163515]
  - IB/core: Add helper to convert port attributes to data rate (Kamal Heib) [RHEL-163515]
  - IB/core: Add async event on device speed change (Kamal Heib) [RHEL-163515]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163515]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163515]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Fix rdma_ucm_query_ib_service_resp struct padding (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163515]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163515]
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release (Kamal Heib) [RHEL-163515]
  - RDMA/core: Add new IB rate for XDR (8x) support (Kamal Heib) [RHEL-163515]
  - RDMA/core: Prevent soft lockup during large user memory region cleanup (Kamal Heib) [RHEL-163515]
  - RDMA/restrack: Fix typos in the comments (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Correct typedef and bad line warnings (Kamal Heib) [RHEL-163515]
  - IB/isert: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/iser: add WQ_PERCPU to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - IB/rdmavt: rdmavt_qp.h: clean up kernel-doc comments (Kamal Heib) [RHEL-163515]
  - RDMA/core: WQ_PERCPU added to alloc_workqueue users (Kamal Heib) [RHEL-163515]
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Kamal Heib) [RHEL-163515]
  - RDMA/uverbs: fix some kernel-doc warnings (Kamal Heib) [RHEL-163515]
  - RDMA/core: let rdma_connect_locked() call lockdep_assert_held(&id_priv->handler_mutex) (Kamal Heib) [RHEL-163515]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-163515]
  - IB/ipoib: Ignore L3 master device (Kamal Heib) [RHEL-163515]
  - RDMA/core: Use route entry flag to decide on loopback traffic (Kamal Heib) [RHEL-163515]
  - RDMA/core: Squash a single user static function (Kamal Heib) [RHEL-163515]
  - RDMA/core: fix "truely"->"truly" (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support write an event into a CM (Kamal Heib) [RHEL-163515]
  - RDMA/ucma: Support query resolved service records (Kamal Heib) [RHEL-163515]
  - RDMA/cma: Support IB service record resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Support IB service records resolution (Kamal Heib) [RHEL-163515]
  - RDMA/sa_query: Add RMPP support for SA queries (Kamal Heib) [RHEL-163515]
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-157828]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-165161]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-165161]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-171979]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-171979]
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-159000]
  - iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement (Jerry Snitselaar) [RHEL-160189]
  - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (Jerry Snitselaar) [RHEL-160189]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169737] {CVE-2025-68183}
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-147247]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158967]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-164699]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-164699]
  - net/ipv6: Remove HBH helpers (Michal Schmidt) [RHEL-156515]
  - net: mana: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - gve: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - bnxt_en: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - ice: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx4: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/mlx5e: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Remove jumbo_remove step from TX path (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on RX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Drop HBH for BIG TCP on TX side (Michal Schmidt) [RHEL-156515]
  - net/ipv6: Introduce payload_len helpers (Michal Schmidt) [RHEL-156515]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161120] {CVE-2025-68741}
  - selftests/bpf: Add test to verify the fix of kprobe_write_ctx abuse (Ines Qian) [RHEL-78291]
  - bpf: Fix abuse of kprobe_write_ctx via freplace (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix kprobe multi stacktrace_ips test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace ips test for kprobe_multi/kretprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove hexdump dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove xxd util dependency (Ines Qian) [RHEL-78291]
  - selftests/bpf: Skip livepatch test when prerequisites are missing (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for livepatch + bpf trampoline (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for exclusive maps (Ines Qian) [RHEL-78291]
  - bpf: Require frozen map for calculating map hash (Ines Qian) [RHEL-78291]
  - bpf: Limit bpf program signature size (Ines Qian) [RHEL-78291]
  - bpf: Fix exclusive map memory leak (Ines Qian) [RHEL-78291]
  - selftests/bpf: Allow selftests to build with older xxd (Ines Qian) [RHEL-78291]
  - bpftool: Allow bpftool to build with openssl < 3 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Update test_tag to use sha256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test widen_imprecise_scalars() with different stack depth (Ines Qian) [RHEL-78291]
  - bpf: account for current allocated stack depth in widen_imprecise_scalars() (Ines Qian) [RHEL-78291]
  - bpf: add _impl suffix for bpf_stream_vprintk() kfunc (Ines Qian) [RHEL-78291]
  - bpf:add _impl suffix for bpf_task_work_schedule* kfuncs (Ines Qian) [RHEL-78291]
  - bpf: Conditionally include dynptr copy kfuncs (Ines Qian) [RHEL-78291]
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Ines Qian) [RHEL-78291]
  - bpf: Sync pending IRQ work before freeing ring buffer (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix redefinition of 'off' as different kind of symbol (Ines Qian) [RHEL-78291]
  - bpf: Fix memory leak in __lookup_instance error path (Ines Qian) [RHEL-78291]
  - selftests: arg_parsing: Ensure data is flushed to disk before reading. (Ines Qian) [RHEL-78291]
  - selftests/bpf: make arg_parsing.c more robust to crashes (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for unpinning htab with internal timer struct (Ines Qian) [RHEL-78291]
  - bpf: Avoid RCU context warning when unpinning htab with internal structs (Ines Qian) [RHEL-78291]
  - libbpf: Fix undefined behavior in {get,put}_unaligned_be32() (Ines Qian) [RHEL-78291]
  - bpf: Finish constification of 1st parameter of bpf_d_path() (Ines Qian) [RHEL-78291]
  - libbpf: Fix missing #pragma in libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - bpf: Reject negative offsets for ALU ops (Ines Qian) [RHEL-78291]
  - libbpf: remove linux/unaligned.h dependency for libbpf_sha256() (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_sha256() implementation into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: move libbpf_errstr() into libbpf_utils.c (Ines Qian) [RHEL-78291]
  - libbpf: remove unused libbpf_strerror_r and STRERR_BUFSIZE (Ines Qian) [RHEL-78291]
  - libbpf: make libbpf_errno.c into more generic libbpf_utils.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix realloc size in bpf_get_addrs (Ines Qian) [RHEL-78291]
  - libbpf: Replace AF_ALG with open coded SHA-256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stress test for rqspinlock in NMI (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test case for different expected_attach_type (Ines Qian) [RHEL-78291]
  - bpf: Enforce expected_attach_type for tailcall compatibility (Ines Qian) [RHEL-78291]
  - bpftool: Remove duplicate string.h header (Ines Qian) [RHEL-78291]
  - bpf: Remove duplicate crypto/sha2.h header (Ines Qian) [RHEL-78291]
  - libbpf: Fix error when st-prefix_ops and ops from differ btf (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add stacktrace map lookup_and_delete_elem test case (Ines Qian) [RHEL-78291]
  - selftests/bpf: Refactor stacktrace_map case with skeleton (Ines Qian) [RHEL-78291]
  - bpf: Add lookup_and_delete_elem for BPF_MAP_STACK_TRACE (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix flaky bpf_cookie selftest (Ines Qian) [RHEL-78291]
  - selftests/bpf: Task_work selftest cleanup fixes (Ines Qian) [RHEL-78291]
  - bpf: Mark kfuncs as __noclone (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe multi write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add kprobe write ctx attach test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context ip register change test (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add uprobe context registers changes test (Ines Qian) [RHEL-78291]
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Ines Qian) [RHEL-78291]
  - bpf: Allow uprobe program to change context registers (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for program signing options (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add union argument tests using fexit programs (Ines Qian) [RHEL-78291]
  - bpf: Allow union argument in trampoline based programs (Ines Qian) [RHEL-78291]
  - selftests: bpf: Add tests for signed loads from arena (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - bpf, x86: Add support for signed arena loads (Ines Qian) [RHEL-78291]
  - selftests/bpf: add bpf task work stress tests (Ines Qian) [RHEL-78291]
  - selftests/bpf: BPF task work scheduling tests (Ines Qian) [RHEL-78291]
  - bpf: task work scheduling kfuncs (Ines Qian) [RHEL-78291]
  - bpf: extract map key pointer calculation (Ines Qian) [RHEL-78291]
  - bpf: bpf task work plumbing (Ines Qian) [RHEL-78291]
  - bpf: verifier: permit non-zero returns from async callbacks (Ines Qian) [RHEL-78291]
  - bpf: htab: extract helper for freeing special structs (Ines Qian) [RHEL-78291]
  - bpf: extract generic helper from process_timer_func() (Ines Qian) [RHEL-78291]
  - bpf: refactor special field-type detection (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable signature verification for some lskel tests (Ines Qian) [RHEL-78291]
  - bpftool: Add support for signing BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Embed and verify the metadata hash in the loader (Ines Qian) [RHEL-78291]
  - libbpf: Update light skeleton for signing (Ines Qian) [RHEL-78291]
  - bpf: Implement signature verification for BPF programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix selftest verifier_arena_large failure (Ines Qian) [RHEL-78291]
  - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 (Ines Qian) [RHEL-78291]
  - bpftool: Fix UAF in get_delegate_value (Ines Qian) [RHEL-78291]
  - bpftool: Add HELP_SPEC_OPTIONS in token.c (Ines Qian) [RHEL-78291]
  - selftests/bpf: test cases for callchain sensitive live stack tracking (Ines Qian) [RHEL-78291]
  - selftests/bpf: __not_msg() tag for test_loader framework (Ines Qian) [RHEL-78291]
  - bpf: table based bpf_insn_successors() (Ines Qian) [RHEL-78291]
  - bpf: disable and remove registers chain based liveness (Ines Qian) [RHEL-78291]
  - bpf: signal error if old liveness is more conservative than new (Ines Qian) [RHEL-78291]
  - bpf: enable callchain sensitive stack liveness tracking (Ines Qian) [RHEL-78291]
  - bpf: callchain sensitive stack liveness tracking using CFG (Ines Qian) [RHEL-78291]
  - bpf: compute instructions postorder per subprogram (Ines Qian) [RHEL-78291]
  - bpf: declare a few utility functions as internal api (Ines Qian) [RHEL-78291]
  - bpf: remove redundant REG_LIVE_READ check in stacksafe() (Ines Qian) [RHEL-78291]
  - bpf: use compute_live_registers() info in clean_func_state (Ines Qian) [RHEL-78291]
  - bpf: bpf_verifier_state->cleaned flag instead of REG_LIVE_DONE (Ines Qian) [RHEL-78291]
  - bpf: Move the signature kfuncs to helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Return hashes of maps in BPF_OBJ_GET_INFO_BY_FD (Ines Qian) [RHEL-78291]
  - libbpf: Support exclusive map creation (Ines Qian) [RHEL-78291]
  - libbpf: Implement SHA256 internal helper (Ines Qian) [RHEL-78291]
  - bpf: Implement exclusive map creation (Ines Qian) [RHEL-78291]
  - bpf: Update the bpf_prog_calc_tag to use SHA256 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf: Enforce RCU protection for KF_RCU_PROTECTED (Ines Qian) [RHEL-78291]
  - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() (Ines Qian) [RHEL-78291]
  - bpf...d_path(): constify path argument (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Ines Qian) [RHEL-78291]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Ines Qian) [RHEL-78291]
  - bpftool: Search for tracefs at /sys/kernel/tracing first (Ines Qian) [RHEL-78291]
  - selftests/bpf: More open-coded gettid syscall cleanup (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add tests for arena fault reporting (Ines Qian) [RHEL-78291]
  - selftests: bpf: use __stderr in stream error tests (Ines Qian) [RHEL-78291]
  - selftests: bpf: introduce __stderr and __stdout (Ines Qian) [RHEL-78291]
  - bpf: Report arena faults to BPF stderr (Ines Qian) [RHEL-78291]
  - bpf: core: introduce main_prog_aux for stream access (Ines Qian) [RHEL-78291]
  - bpf: arm64: simplify exception table handling (Ines Qian) [RHEL-78291]
  - bpf: WQ_PERCPU added to alloc_workqueue users (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_unbound_wq with system_dfl_wq (Ines Qian) [RHEL-78291]
  - bpf: replace use of system_wq with system_percpu_wq (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix the issue where the error code is 0 (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_ATOMIC instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Introduce bpf_jit_emit_atomic_ops() to emit atomic instructions (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement bpf_addr_space_cast instruction (Ines Qian) [RHEL-78291]
  - powerpc64/bpf: Implement PROBE_MEM32 pseudo instructions (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add BPF program dump in veristat (Ines Qian) [RHEL-78291]
  - libbpf: Remove unused args in parse_usdt_note (Ines Qian) [RHEL-78291]
  - bpf, arm64: Remove duplicated bpf_flush_icache() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test kfunc bpf_strcasecmp (Ines Qian) [RHEL-78291]
  - bpf: add bpf_strcasecmp kfunc (Ines Qian) [RHEL-78291]
  - selftests/bpf: add benchmark testing for kprobe-multi-all (Ines Qian) [RHEL-78291]
  - selftests/bpf: skip recursive functions for kprobe_multi (Ines Qian) [RHEL-78291]
  - selftests/bpf: move get_ksyms and get_addrs to trace_helpers.c (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpftool: Add CET-aware symbol matching for x86_64 architectures (Ines Qian) [RHEL-78291]
  - bpftool: Refactor kernel config reading into common helper (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add LPM trie microbenchmarks (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto tests for arm64 (Ines Qian) [RHEL-78291]
  - bpf, arm64: Add JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enrich subtest_basic_usdt case in selftests to cover SIB handling logic (Ines Qian) [RHEL-78291]
  - libbpf: Fix USDT SIB argument handling causing unrecognized register error (Ines Qian) [RHEL-78291]
  - selftests/bpf: Fix typos and grammar in test sources (Ines Qian) [RHEL-78291]
  - bpf: Add selftest to check the verifier's abstract multiplication (Ines Qian) [RHEL-78291]
  - bpf: Improve the general precision of tnum_mul (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove may_goto tests from DENYLIST.s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Enable timed may_goto verifier tests on s390x (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add __arch_s390x macro (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add a missing newline to the "bad arch spec" message (Ines Qian) [RHEL-78291]
  - s390/bpf: Add s390 JIT support for timed may_goto (Ines Qian) [RHEL-78291]
  - selftests/bpf: Remove entries from config.{arch} already present in config (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for trampoline.c (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_prog_run_array_cg() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_task_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_iter_run_prog() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_inode_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: use rcu_read_lock_dont_migrate() for bpf_cgrp_storage_free() (Ines Qian) [RHEL-78291]
  - bpf: Use sha1() instead of sha1_transform() in bpf_prog_calc_tag() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Tests for is_scalar_branch_taken tnum logic (Ines Qian) [RHEL-78291]
  - bpf: Use tnums for JEQ/JNE is_branch_taken logic (Ines Qian) [RHEL-78291]
  - selftests/bpf: Use vmlinux.h for BPF programs (Ines Qian) [RHEL-78291]
  - libbpf: Add documentation to version and error API functions (Ines Qian) [RHEL-78291]
  - s390/bpf: Use direct calls and jumps where possible (Ines Qian) [RHEL-78291]
  - bpftool: Add kernel.kptr_restrict hint for no instructions (Ines Qian) [RHEL-78291]
  - bpf: Add a verbose message when the BTF limit is reached (Ines Qian) [RHEL-78291]
  - bpf: Replace get_next_cpu() with cpumask_next_wrap() (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add test for DEVMAP reuse (Ines Qian) [RHEL-78291]
  - libbpf: Fix reuse of DEVMAP (Ines Qian) [RHEL-78291]
  - bpf: Remove migrate_disable in kprobe_multi_link_prog_run (Ines Qian) [RHEL-78291]
  - selftests/bpf: Copy test_kmods when installing selftest (Ines Qian) [RHEL-78291]
  - bpf: Don't use %pK through printk (Ines Qian) [RHEL-78291]
  - bpf: Replace kvfree with kfree for kzalloc memory (Ines Qian) [RHEL-78291]
  - bpf: Remove redundant __GFP_NOWARN (Ines Qian) [RHEL-78291]
  - bpf: Standardize function declaration style (Ines Qian) [RHEL-78291]
  - bpf: removed unused 'env' parameter from is_reg64 and insn_has_def32 (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test multi_st_ops and calling kfuncs from different programs (Ines Qian) [RHEL-78291]
  - selftests/bpf: Add multi_st_ops that supports multiple instances (Ines Qian) [RHEL-78291]
  - bpf: Allow struct_ops to get map id by kdata (Ines Qian) [RHEL-78291]
  - bpftool: Add bash completion for token argument (Ines Qian) [RHEL-78291]
  - bpftool: Add bpftool-token manpage (Ines Qian) [RHEL-78291]
  - bpftool: Add bpf_token show (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test concurrent task local data key creation (Ines Qian) [RHEL-78291]
  - selftests/bpf: Test basic task local data operations (Ines Qian) [RHEL-78291]
  - selftests/bpf: Introduce task local data (Ines Qian) [RHEL-78291]
  - bpf: Allow syscall bpf programs to call non-recur helpers (Ines Qian) [RHEL-78291]
  - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (Charles Haithcock) [RHEL-154387]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-228
changelog:
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
  - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - ptrace: require CAP_SYS_PTRACE on mm-less tasks (kABI-safe Qualys fix)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-229.el10]
changelog:
  - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176448] {CVE-2026-46333}
  - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174757] {CVE-2026-43303}
  - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171616] {CVE-2026-23375}
  - anon_inode: rework assertions (Rafael Aquini) [RHEL-171616]
  - vfs: use the new debug macros in inode_set_cached_link() (Rafael Aquini) [RHEL-171616]
  - vfs: catch invalid modes in may_open() (Rafael Aquini) [RHEL-171616]
  - vfs: add initial support for CONFIG_DEBUG_VFS (Rafael Aquini) [RHEL-171616]
  - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add open() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add exec() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chmod() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests/filesystems: add chown() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
  - selftests: add file SLAB_TYPESAFE_BY_RCU recycling stressor (Rafael Aquini) [RHEL-171616]
  - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171616]
  - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171616]
  - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171616]
  - coccinelle: kmalloc_obj: Remove default GFP_KERNEL arg (Michal Schmidt) [RHEL-174796]
  - default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (Michal Schmidt) [RHEL-174796]
  - add default_gfp() helper macro and use it in the new *alloc_obj() helpers (Michal Schmidt) [RHEL-174796]
  - coccinelle: Add kmalloc_objs conversion script (Michal Schmidt) [RHEL-174796]
  - slab.h: disable completely broken overflow handling in flex allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_flex() and family (Michal Schmidt) [RHEL-174796]
  - compiler_types: Introduce __flex_counter() and family (Michal Schmidt) [RHEL-174796]
  - checkpatch: Suggest kmalloc_obj family for sizeof allocations (Michal Schmidt) [RHEL-174796]
  - slab: Introduce kmalloc_obj() and family (Michal Schmidt) [RHEL-174796]
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (David Marlin) [RHEL-172460 RHEL-172865] {CVE-2026-31772}
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-172460]
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-172460]
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-172460]
  - Bluetooth: MGMT: validate LTK enc_size on load (David Marlin) [RHEL-172460 RHEL-172580] {CVE-2026-43020}
  - Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-172460]
  - Bluetooth: hci_event: move wake reason storage into validated event handlers (David Marlin) [RHEL-172460]
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (David Marlin) [RHEL-172460 RHEL-172607] {CVE-2026-43023}
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-172460]
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_aml: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Enable HFP hardware offload for WCN6855 and WCN7850 (David Marlin) [RHEL-172460]
  - Bluetooth: hci_qca: Refactor HFP hardware offload capability handling (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Remove duplicate entry for 0x13d3/0x3618 (David Marlin) [RHEL-172460]
  - Bluetooth: btintel: Remove unneeded CONFIG_PM* #ifdef's (David Marlin) [RHEL-172460]
  - Bluetooth: btnxpuart: Remove unneeded CONFIG_PM ifdef (David Marlin) [RHEL-172460]
  - Bluetooth: btintel_pcie: Remove unnecessary check before kfree_skb() (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Reject autosuspend if discovery is active (David Marlin) [RHEL-172460]
  - Bluetooth: hci_core: Export hci_discovery_active (David Marlin) [RHEL-172460]
  - Bluetooth: btusb: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: Fix using PHYs bitfields as PHY value (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: Add WCN6855 firmware priority selection feature (David Marlin) [RHEL-172460]
  - Bluetooth: btqca: move WCN7850 workaround to the caller (David Marlin) [RHEL-172460]
  - Bluetooth: btmtksdio: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
  - Bluetooth: hci_bcm4377: Use generic power management (David Marlin) [RHEL-172460]
  - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174522] {CVE-2026-43284}
  - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-170705]
  - iommu/arm-smmu-v3: Fix typos introduced by arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Do not continue in __arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Perform per-domain invalidations using arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add arm_smmu_invs based arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Populate smmu_domain->invs when attaching masters (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Pre-allocate a per-master invalidation array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Introduce a per-domain arm_smmu_invs array (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add an inline arm_smmu_domain_free() (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Explicitly set smmu_domain->stage for SVA (Jerry Snitselaar) [RHEL-88961]
  - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Jerry Snitselaar) [RHEL-88961]
  - sort.h: hoist cmp_int() into generic header file (Jerry Snitselaar) [RHEL-88961]
  - lib/sort.c: add _nonatomic() variants with cond_resched() (Jerry Snitselaar) [RHEL-88961]
  - lib/list_sort: clarify comparison function requirements in list_sort() (Jerry Snitselaar) [RHEL-88961]
  - lib/sort: clarify comparison function requirements in sort_r() (Jerry Snitselaar) [RHEL-88961]
  - cgroup/cpuset: Skip security check for hotplug induced v1 task migration (Waiman Long) [RHEL-160958]
  - cgroup/cpuset: Simplify setsched decision check in task iteration loop of cpuset_can_attach() (Waiman Long) [RHEL-160958]
  - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-93825]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-230.el10]
changelog:
  - powercap: intel_rapl: Add support for Nova Lake processors (Steve Best) [RHEL-117269]
  - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171638]
  - selftests/bpf: Ensure typedef are deduplicated in split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix deduplication of typedef with base definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Remove static qualifier from local subprog pointer (Jerome Marchand) [RHEL-139985]
  - bpf: Fix ld_{abs,ind} failure path analysis in subprogs (Jerome Marchand) [RHEL-139985]
  - bpf: Propagate error from visit_tailcall_insn (Jerome Marchand) [RHEL-139985]
  - ftrace,bpf: Remove FTRACE_OPS_FL_JMP ftrace_ops flag (Jerome Marchand) [RHEL-139985]
  - ftrace: Fix address for jmp mode in t_show() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add regression test for bpf_d_path() (Jerome Marchand) [RHEL-139985]
  - bpf: Fix verifier assumptions of bpf_d_path's output buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for truncated dmabuf_iter reads (Jerome Marchand) [RHEL-139985]
  - bpf: Fix truncated dmabuf iterator reads (Jerome Marchand) [RHEL-139985]
  - x86/unwind/orc: Support reliable unwinding through BPF stack frames (Jerome Marchand) [RHEL-139985]
  - bpf: Add bpf_has_frame_pointer() (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix -Wdiscarded-qualifiers under C23 (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix build warnings due to MS extensions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add -fms-extensions to bpf build flags (Jerome Marchand) [RHEL-139985]
  - bpf: optimize bpf_map_update_elem() for map-in-map types (Jerome Marchand) [RHEL-139985]
  - bpf: make kprobe_multi_link_prog_run always_inline (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add success stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Precede non-head waiter queueing with AA check (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable spinning for trylock fallback (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Use trylock fallback when per-CPU rqnode is busy (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Perform AA checks immediately (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Enclose lock/unlock within lock entry acquisitions (Jerome Marchand) [RHEL-139985]
  - bpf: Remove runqslower tool (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Remove usage of lsm/file_alloc_security in selftest (Jerome Marchand) [RHEL-139985]
  - bpf: Disable file_alloc_security hook (Jerome Marchand) [RHEL-139985]
  - bpf: check for insn arrays in check_ptr_alignment (Jerome Marchand) [RHEL-139985]
  - bpf: force BPF_F_RDONLY_PROG on insn array creation (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Make CS length configurable for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add lock wait time stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Relax CPU requirements for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - bpf: Introduce internal bpf_map_check_op_flags helper function (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix some incorrect @param descriptions in the comment of libbpf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Call bpf_get_numa_node_id() in trigger_count() (Jerome Marchand) [RHEL-139985]
  - docs: bpf: map_array: Specify BPF_MAP_TYPE_PERCPU_ARRAY value size limit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix htab_update/reenter_update selftest failure (Jerome Marchand) [RHEL-139985]
  - bpf: implement "jmp" mode for trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: specify the old and new poke_type for bpf_arch_text_poke (Jerome Marchand) [RHEL-139985]
  - bpf,x86: adjust the "jmp" mode for bpf trampoline (Jerome Marchand) [RHEL-139985]
  - bpf: fix the usage of BPF_TRAMP_F_SKIP_FRAME (Jerome Marchand) [RHEL-139985]
  - x86/ftrace: Implement DYNAMIC_FTRACE_WITH_JMP (Jerome Marchand) [RHEL-139985]
  - ftrace: Introduce FTRACE_OPS_FL_JMP (Jerome Marchand) [RHEL-139985]
  - bpf: cleanup aux->used_maps after jit (Jerome Marchand) [RHEL-139985]
  - selftests: bpf: Add tests for unbalanced rcu_read_lock (Jerome Marchand) [RHEL-139985]
  - bpf: support nested rcu critical sections (Jerome Marchand) [RHEL-139985]
  - bpf: test the correct stack liveness of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: correct stack liveness for tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: test the proper verification of tail calls (Jerome Marchand) [RHEL-139985]
  - bpf: properly verify tail call behavior (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Jerome Marchand) [RHEL-139985]
  - bpf: Document cfi_stubs and owner fields in struct bpf_struct_ops (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names (Jerome Marchand) [RHEL-139985]
  - bpf: don't skip other information if xlated_prog_insns is skipped (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: Move desc->imm setup to sort_kfunc_descs_by_imm_off() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Align kfuncs renamed in bpf tree (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add BTF dedup tests for recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix BTF dedup to support recursive typedef definitions (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix failure paths in send_signal test (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Convert glob_match() to bpf arena (Jerome Marchand) [RHEL-139985]
  - bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Jerome Marchand) [RHEL-139985]
  - bpf: Add missing checks to avoid verbose verifier log (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: retry bpf_map_update_elem() when E2BIG is returned (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test to verify freeing the special fields in pcpu maps (Jerome Marchand) [RHEL-139985]
  - bpf: Free special fields when update [lru_,]percpu_hash maps (Jerome Marchand) [RHEL-139985]
  - bpf: Adjust return value for queue destruction in rqspinlock (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add C-level selftests for indirect jumps (Jerome Marchand) [RHEL-139985]
  - libbpf: support llvm-generated indirect jumps (Jerome Marchand) [RHEL-139985]
  - bpf: disasm: add support for BPF_JMP|BPF_JA|BPF_X (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: test instructions arrays with blinding (Jerome Marchand) [RHEL-139985]
  - bpf: support instructions arrays with constants blinding (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add selftests for new insn_array map (Jerome Marchand) [RHEL-139985]
  - libbpf: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpftool: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
  - bpf, x86: add new map type: instructions array (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test parsing of (multi-)split BTF (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix parsing of multi-split BTF (Jerome Marchand) [RHEL-139985]
  - docs/bpf: Add missing BPF k/uprobe program types to docs (Jerome Marchand) [RHEL-139985]
  - libbpf: Update the comment to remove the reference to the deprecated interface bpf_program__load(). (Jerome Marchand) [RHEL-139985]
  - libbpf: Complete the missing @param and @return tags in btf.h (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add test for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - bpf: Skip bounds adjustment for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add ABBCCA case for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
  - rqspinlock: Disable queue destruction for deadlocks (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix intermittent failures in file_reader test (Jerome Marchand) [RHEL-139985]
  - libbpf: Fix the incorrect reference to the memlock_rlim variable in the comment. (Jerome Marchand) [RHEL-139985]
  - libbpf: Optimize the redundant code in the bpf_object__init_user_btf_maps() function. (Jerome Marchand) [RHEL-139985]
  - bpf: Fix stackmap overflow check in __bpf_get_stackid() (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor stack map trace depth calculation into helper function (Jerome Marchand) [RHEL-139985]
  - bpftool: Fix missing closing parethesis for BTF_KIND_UNKN (Jerome Marchand) [RHEL-139985]
  - selftests/bpf/benchs: Add overwrite mode benchmark for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add overwrite mode test for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - bpf: Add overwrite mode for BPF ring buffer (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: add file dynptr tests (Jerome Marchand) [RHEL-139985]
  - bpf: dispatch to sleepable file dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: refactor kfunc specialization (Jerome Marchand) [RHEL-139985]
  - bpf: add kfuncs and helpers support for file dynptrs (Jerome Marchand) [RHEL-139985]
  - bpf: add plumbing for file-backed dynptr (Jerome Marchand) [RHEL-139985]
  - bpf: verifier: centralize const dynptr check in unmark_stack_slots_dynptr() (Jerome Marchand) [RHEL-139985]
  - bpf: widen dynptr size/offset to 64 bit (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: remove unnecessary kfunc prototypes (Jerome Marchand) [RHEL-139985]
  - libbpf: fix formatting of bpf_object__append_subprog_code (Jerome Marchand) [RHEL-139985]
  - bpf: make bpf_insn_successors to return a pointer (Jerome Marchand) [RHEL-139985]
  - bpf: generalize and export map_get_next_key for arrays (Jerome Marchand) [RHEL-139985]
  - bpf: save the start of functions in bpf_prog_aux (Jerome Marchand) [RHEL-139985]
  - bpf: fix the return value of push_stack (Jerome Marchand) [RHEL-139985]
  - bpf: Clarify get_outer_instance() handling in propagate_to_outer_instance() (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix list_del() in arena list (Jerome Marchand) [RHEL-139985]
  - samples/bpf: Fix spelling typos in samples/bpf (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22 (Jerome Marchand) [RHEL-139985]
  - bpf: mark vma->{vm_mm,vm_file} as __safe_trusted_or_null (Jerome Marchand) [RHEL-139985]
  - bpf: mark mm->owner as __safe_rcu_or_null (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Silence unused-but-set build warnings (Jerome Marchand) [RHEL-139985]
  - bpf: Consistently use bpf_rcu_lock_held() everywhere (Jerome Marchand) [RHEL-139985]
  - bpf: Extract internal structs validation logic into helpers (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add more bpf_wq tests (Jerome Marchand) [RHEL-139985]
  - bpf: Fix handling maps with no BTF and non-constant offsets for the bpf_wq (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Test bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - bpf: add bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
  - selftests/bpf: Add tests for async cb context (Jerome Marchand) [RHEL-139985]
  - bpf: Refactor storage_get_func_atomic to generic non_sleepable flag (Jerome Marchand) [RHEL-139985]
  - bpf: Fix sleepable context for async callbacks (Jerome Marchand) [RHEL-139985]
  - bpf: Cleanup unused func args in rqspinlock implementation (Jerome Marchand) [RHEL-139985]
  - bpf: Add dynptr type for skb metadata (Jerome Marchand) [RHEL-139985]
  - cpufreq/amd-pstate: Add comment explaining nominal_perf usage for performance policy (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Add static asserts for EPP indices (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Fix some whitespace issues (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Adjust return values in amd_pstate_update_status() (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Make amd_pstate_get_mode_string() never return NULL (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Drop NULL value from amd_pstate_mode_string (Steve Best) [RHEL-127643]
  - cpufreq/amd-pstate: Use sysfs_match_string() for epp (Steve Best) [RHEL-127643]
  - efi/cper: Fix cper_bits_to_str buffer handling and return value (Thomas Huth) [RHEL-164371]
  - efi: Wipe INITRD config table from memory after consumption (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Fix EDID support in mixed-mode (Thomas Huth) [RHEL-164371]
  - docs: efi: add CPER functions to driver-api (Thomas Huth) [RHEL-164371]
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Thomas Huth) [RHEL-164371]
  - efi/cper: Add a new helper function to print bitmasks (Thomas Huth) [RHEL-164371]
  - efi/cper: Adjust infopfx size to accept an extra space (Thomas Huth) [RHEL-164371]
  - efi/libstub: x86: Store EDID in boot_params (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Add support for reading EDID (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Initialize screen_info in helper function (Thomas Huth) [RHEL-164371]
  - efi/libstub: gop: Find GOP handle instead of GOP data (Thomas Huth) [RHEL-164371]
  - efi: Fix trailing whitespace in header file (Thomas Huth) [RHEL-164371]
  - efi/memattr: Convert efi_memattr_init() return type to void (Thomas Huth) [RHEL-164371]
  - efi: stmm: fix kernel-doc "bad line" warnings (Thomas Huth) [RHEL-164371]
  - efi/riscv: Remove the useless failure return message print (Thomas Huth) [RHEL-164371]
  - efistub/x86: Add fallback for SMBIOS record lookup (Thomas Huth) [RHEL-164371]
  - kthread: Warn if mm_struct lacks user_ns in kthread_use_mm() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Don't fail check current_in_efi() if preemptible (Thomas Huth) [RHEL-164371]
  - arm64: efi: Fix NULL pointer dereference by initializing user_ns (Thomas Huth) [RHEL-164371]
  - arm64/efi: Call EFI runtime services without disabling preemption (Thomas Huth) [RHEL-164371]
  - arm64/efi: Move uaccess en/disable out of efi_set_pgd() (Thomas Huth) [RHEL-164371]
  - arm64/efi: Drop efi_rt_lock spinlock from EFI arch wrapper (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Permit kernel mode NEON with IRQs off (Thomas Huth) [RHEL-164371]
  - arm64/fpsimd: Don't warn when EFI execution context is preemptible (Thomas Huth) [RHEL-164371]
  - efi/runtime-wrappers: Keep track of the efi_runtime_lock owner (Thomas Huth) [RHEL-164371]
  - efi: Add missing static initializer for efi_mm::cpus_allowed_lock (Thomas Huth) [RHEL-164371]
  - efi/libstub: Fix page table access in 5-level to 4-level paging transition (Thomas Huth) [RHEL-164371]
  - platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Introduce new interface to export NPU metrics (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Refactor repetitive BIOS output handling (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (Steve Best) [RHEL-127641]
  - platform/x86/amd/pmf: Remove redundant ternary operators (Steve Best) [RHEL-127641]
  - hwmon: (k10temp) Add AMD Steam Deck APU ID (Steve Best) [RHEL-127650]
  - hwmon: (k10temp) Add device ID for Strix Halo (Steve Best) [RHEL-127650]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-231.el10]
changelog:
  - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-175521]
  - KVM: arm64: Invert KVM_PGTABLE_WALK_HANDLE_FAULT to fix pKVM walkers (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Fix page leak in user_mem_abort() on atomic fault (Sebastian Ott) [RHEL-151899]
  - kselftest/arm64: Add HWCAP test for FEAT_LS64 (Sebastian Ott) [RHEL-151899]
  - arm64: Add support for FEAT_{LS64, LS64_V} (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for FEAT_PMUv3 (Sebastian Ott) [RHEL-151899]
  - docs: arm64: Document EL3 requirements for cpu debug architecture (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable FEAT_{LS64, LS64_V} in the supported guest (Sebastian Ott) [RHEL-151899]
  - arm64: Provide basic EL2 setup for FEAT_{LS64, LS64_V} usage at EL0/1 (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle DABT caused by LS64* instructions on unsupported memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add documentation for KVM_EXIT_ARM_LDST64B (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Add exit to userspace on {LD,ST}64B* outside of memslots (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that reads to inaccessible guest_memfd VMAs SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Verify that faulting in private guest_memfd memory fails (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrapper macro to handle and assert on expected SIGBUS (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Isolate the guest_memfd Copy-on-Write negative testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add wrappers for mmap() and munmap() to assert success (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add test coverage for guest_memfd without GUEST_MEMFD_FLAG_MMAP (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Create a new guest_memfd for each testcase (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Stash the host page size in a global in the guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Allow mmap() on guest_memfd for x86 VMs with private memory (Sebastian Ott) [RHEL-151899]
  - KVM: Explicitly mark KVM_GUEST_MEMFD as depending on KVM_GENERIC_MMU_NOTIFIER (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Invalidate SHARED GPAs if gmem supports INIT_SHARED (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add INIT_SHARED flag, reject user page faults if not set (Sebastian Ott) [RHEL-151899]
  - KVM: Rework KVM_CAP_GUEST_MEMFD_MMAP into KVM_CAP_GUEST_MEMFD_FLAGS (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Forward FEAT_XNX permissions to the shadow stage-2 (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Add guest_memfd testcase to fault-in on !mmap()'d memory (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: guest_memfd mmap() test when mmap is supported (Sebastian Ott) [RHEL-151899]
  - KVM: selftests: Do not use hardcoded page sizes in guest_memfd test (Sebastian Ott) [RHEL-151899]
  - KVM: Allow and advertise support for host mmap() on guest_memfd files (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Enable support for guest_memfd backed memory (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: nv: Handle VNCR_EL2-triggered faults backed by guest_memfd (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Handle guest_memfd-backed guest page faults (Sebastian Ott) [RHEL-151899]
  - KVM: arm64: Refactor user_mem_abort() (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Handle guest page faults for guest_memfd with shared memory (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Extend guest_memfd's max mapping level to shared mappings (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Enforce guest_memfd's max order when recovering hugepages (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Hoist guest_memfd max level/order helpers "up" in mmu.c (Sebastian Ott) [RHEL-151899]
  - KVM: x86/mmu: Rename .private_max_mapping_level() to .gmem_max_mapping_level() (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Track guest_memfd mmap support in memslot (Sebastian Ott) [RHEL-151899]
  - KVM: guest_memfd: Add plumbing to host to map guest_memfd pages (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Enable KVM_GUEST_MEMFD for all 64-bit builds (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comment that refers to kvm uapi header path (Sebastian Ott) [RHEL-151899]
  - KVM: Fix comments that refer to slots_lock (Sebastian Ott) [RHEL-151899]
  - KVM: Rename kvm_slot_can_be_private() to kvm_slot_has_gmem() (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_GENERIC_PRIVATE_MEM to CONFIG_HAVE_KVM_ARCH_GMEM_POPULATE (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select TDX's KVM_GENERIC_xxx dependencies iff CONFIG_KVM_INTEL_TDX=y (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Select KVM_GENERIC_PRIVATE_MEM directly from KVM_SW_PROTECTED_VM (Sebastian Ott) [RHEL-151899]
  - KVM: x86: Have all vendor neutral sub-configs depend on KVM_X86, not just KVM (Sebastian Ott) [RHEL-151899]
  - KVM: Rename CONFIG_KVM_PRIVATE_MEM to CONFIG_KVM_GUEST_MEMFD (Sebastian Ott) [RHEL-151899]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-232.el10]
changelog:
  - PCI: Fix alignment calculation for resource size larger than align (Myron Stowe) [RHEL-151449]
  - PCI: Fix premature removal from realloc_head list during resource assignment (Myron Stowe) [RHEL-151449]
  - PCI: Prevent shrinking bridge window from its required size (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: Document PCIe TLP Header decoder for AER messages (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Fix pci_pwrctrl_is_required() device node leak (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Do not power off on pwrctrl device removal (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Create pwrctrl devices only for PCI device nodes (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Ensure that remote endpoint node parent has supply requirement (Myron Stowe) [RHEL-151449]
  - sparc/PCI: Initialize msi_addr_mask for OF-created PCI devices (Myron Stowe) [RHEL-151449]
  - powerpc/pci: Initialize msi_addr_mask for OF-created PCI devices (Myron Stowe) [RHEL-151449]
  - ALSA: hda/intel: Make MSI address limit based on the device DMA limit (Myron Stowe) [RHEL-151449]
  - drm/radeon: Make MSI address limit based on the device DMA limit (Myron Stowe) [RHEL-151449]
  - PCI/MSI: Check the device specific address mask in msi_verify_entries() (Myron Stowe) [RHEL-151449]
  - PCI/MSI: Convert the boolean no_64bit_msi flag to a DMA address mask (Myron Stowe) [RHEL-151449]
  - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: pci-epf-test: Select configfs (Myron Stowe) [RHEL-151449]
  - PCI: Account fully optional bridge windows correctly (Myron Stowe) [RHEL-151449]
  - PCI: Remove useless WARN_ON() from devres (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Add missing struct p2pdma_provider documentation (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: Fix typos in msi-howto.rst (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Add missing NULL check for alloc_workqueue() (Myron Stowe) [RHEL-151449]
  - PCI: Add WQ_PERCPU to alloc_workqueue() users (Myron Stowe) [RHEL-151449]
  - PCI: Disable ACS SV for IDT 0x8090 switch (Myron Stowe) [RHEL-151449]
  - PCI: Disable ACS SV for IDT 0x80b5 switch (Myron Stowe) [RHEL-151449]
  - PCI: Cache ACS Capabilities register (Myron Stowe) [RHEL-151449]
  - PCI: Enable ACS after configuring IOMMU for OF platforms (Myron Stowe) [RHEL-151449]
  - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] (Myron Stowe) [RHEL-151449]
  - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (Myron Stowe) [RHEL-151449]
  - PCI: Use device_lock_assert() to verify device lock is held (Myron Stowe) [RHEL-151449]
  - PCI: Use lockdep_assert_held(pci_bus_sem) to verify lock is held (Myron Stowe) [RHEL-151449]
  - PCI: Fix pci_slot_lock () device locking (Myron Stowe) [RHEL-151449]
  - PCI: Fix pci_slot_trylock() error handling (Myron Stowe) [RHEL-151449]
  - PCI: Mark Nvidia GB10 to avoid bus reset (Myron Stowe) [RHEL-151449]
  - PCI: Mark ASM1164 SATA controller to avoid bus reset (Myron Stowe) [RHEL-151449]
  - Documentation: tracing: Add PCI tracepoint documentation (Myron Stowe) [RHEL-151449]
  - PCI: Move CardBus bridge scanning to setup-cardbus.c (Myron Stowe) [RHEL-151449]
  - PCI: Add pbus_validate_busn() for Bus Number validation (Myron Stowe) [RHEL-151449]
  - PCI: Add dword #defines for Bus Number + Secondary Latency Timer (Myron Stowe) [RHEL-151449]
  - PCI: Use scnprintf() instead of sprintf() (Myron Stowe) [RHEL-151449]
  - PCI: Handle CardBus-specific params in setup-cardbus.c (Myron Stowe) [RHEL-151449]
  - PCI: Separate CardBus setup & build it only with CONFIG_CARDBUS (Myron Stowe) [RHEL-151449]
  - PCI: Add 'pci' prefix to struct pci_dev_resource handling functions (Myron Stowe) [RHEL-151449]
  - PCI: Use resource_assigned() in setup-bus.c algorithm (Myron Stowe) [RHEL-151449]
  - resource: Mark res given to resource_assigned() as const (Myron Stowe) [RHEL-151449]
  - PCI: Add pbus_mem_size_optional() to handle optional sizes (Myron Stowe) [RHEL-151449]
  - PCI: Check invalid align earlier in pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - PCI: Log reset and restore of resources (Myron Stowe) [RHEL-151449]
  - PCI: Add pci_resource_is_bridge_win() (Myron Stowe) [RHEL-151449]
  - PCI: Fetch dev_res to local var in __assign_resources_sorted() (Myron Stowe) [RHEL-151449]
  - PCI: Use res_to_dev_res() in reassign_resources_sorted() (Myron Stowe) [RHEL-151449]
  - PCI: Pass bridge window resource to pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - PCI: Push realloc check into pbus_size_mem() (Myron Stowe) [RHEL-151449]
  - resource: Increase MAX_IORES_LEVEL to 8 (Myron Stowe) [RHEL-151449]
  - PCI: Use resource_set_range() that correctly sets ->end (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Create pwrctrl device if graph port is found (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add PCIe M.2 connector support (Myron Stowe) [RHEL-151449]
  - PCI: Drop the assert_perst() callback (Myron Stowe) [RHEL-151449]
  - PCI: qcom: Drop the assert_perst() callbacks (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Switch to pwrctrl create, power on/off, destroy APIs (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add APIs to power on/off pwrctrl devices (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add APIs to create, destroy pwrctrl devices (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: Add 'struct pci_pwrctrl::power_{on/off}' callbacks (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: pwrseq: Factor out power on/off code to helpers (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: slot: Factor out power on/off code to helpers (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: slot: Rename private struct and pointers for consistency (Myron Stowe) [RHEL-151449]
  - PCI/pwrctrl: pwrseq: Rename private struct and pointers for consistency (Myron Stowe) [RHEL-151449]
  - PCI/PTM: Fix pcie_ptm_create_debugfs() memory leak (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Use bus-type functions (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Don't check for valid device and driver in bus callbacks (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Move pcie_port_bus_type to pcie source file (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Don't check for the driver's and device's bus (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Drop empty shutdown callback (Myron Stowe) [RHEL-151449]
  - PCI/portdrv: Fix potential resource leak (Myron Stowe) [RHEL-151449]
  - PCI/PM: Prevent runtime suspend until devices are fully initialized (Myron Stowe) [RHEL-151449]
  - PCI/PM: Avoid redundant delays on D3hot->D3cold (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Reset page reference count when page mapping fails (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition (Myron Stowe) [RHEL-151449]
  - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails (Myron Stowe) [RHEL-151449]
  - PCI/PME: Replace RMW of Root Status register with direct write (Myron Stowe) [RHEL-151449]
  - PCI/ACPI: Restrict program_hpx_type2() to AER bits (Myron Stowe) [RHEL-151449]
  - PCI: Initialize RCB from pci_configure_device() (Myron Stowe) [RHEL-151449]
  - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() (Myron Stowe) [RHEL-151449]
  - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken (Myron Stowe) [RHEL-151449]
  - PCI: Do not attempt to set ExtTag for VFs (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions (Myron Stowe) [RHEL-151449]
  - PCI: endpoint: Avoid creating sub-groups asynchronously (Myron Stowe) [RHEL-151449]
  - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors (Myron Stowe) [RHEL-151449]
  - PCI/bwctrl: Disable BW controller on Intel P45 using a quirk (Myron Stowe) [RHEL-151449]
  - PCI: trace: Add RAS tracepoint to monitor link speed changes (Myron Stowe) [RHEL-151449]
  - PCI: trace: Add generic RAS tracepoint for hotplug event (Myron Stowe) [RHEL-151449]
  - PCI/AER: Clear stale errors on reporting agents upon probe (Myron Stowe) [RHEL-151449]
  - resource: Introduce resource_assigned() for discerning active resources (Myron Stowe) [RHEL-151449]
  - PCI: Test for bit underflow in pcie_set_readrq() (Myron Stowe) [RHEL-151449]
  - docs: powerpc: add htm.rst to toctree (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Enable third attention indicator state (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Fix surprise plug detection and recovery (Myron Stowe) [RHEL-151449]
  - powerpc/eeh: Export eeh_unfreeze_pe() (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Work around switches with broken presence detection (Myron Stowe) [RHEL-151449]
  - PCI: pnv_php: Clean up allocated IRQs on unplug (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variant of DEFINE_RES() (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variants of DEFINE_RES_*_NAMED() (Myron Stowe) [RHEL-151449]
  - resource: replace open coded variant of DEFINE_RES_NAMED_DESC() (Myron Stowe) [RHEL-151449]
  - resource: split DEFINE_RES_NAMED_DESC() out of DEFINE_RES_NAMED() (Myron Stowe) [RHEL-151449]
  - xfs: fix remote xattr valuelblk check (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: fix the xattr scrub to detect freemap/entries array collisions (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: strengthen attr leaf block freemap checking (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: refactor attr3 leaf table size computation (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174054] {CVE-2026-43158}
  - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171476] {CVE-2026-31613}
  - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-167108] {CVE-2025-40237}
  - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-167108]
  - scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-153020]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-233.el10]
changelog:
  - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-130557]
  - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163346] {CVE-2025-38653}
  - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163346] {CVE-2025-38653}
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163346] {CVE-2025-38653}
  - rxrpc: Fix recvmsg() unconditional requeue (CKI Backport Bot) [RHEL-147235] {CVE-2026-23066}


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Koichiro Iwao <meta@almalinux.org> - 24.2.8-2.alma.1
changelog:
  - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in
    AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32)


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.0-1
changelog:
  - Update to 2.87.0
  - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.5-1
changelog:
  - RHEL-159874 - Rebase mingw-glib2 to 2.87.5
  - RHEL-159187 - CVE-2025-14087 mingw-glib2: GLib: Buffer underflow in GVariant parser leads to heap corruption
  - Drop 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch see https://bugzilla.redhat.com/show_bug.cgi?id=2431179


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-1
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


