diff --git a/Makefile.rhelver b/Makefile.rhelver
index 36d5234..08411e7 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 4
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 396
+RHEL_RELEASE = 397
 
 #
 # ZSTREAM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index b1b0b1b..a7d2fd0 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -3736,6 +3736,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 69e4455..a46a539 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -3715,6 +3715,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 08b2d92..38b8214 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -3733,6 +3733,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index de00edf..5e7b5de 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -3712,6 +3712,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 4619f5d..1b6cb36 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -3804,6 +3804,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index facf704..d29c0cf 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -3783,6 +3783,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 3756bb1..5c806ed 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -3394,6 +3394,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index be419a9..e415242 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -3374,6 +3374,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index 14d37bd..9cabaf5 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -3380,6 +3380,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 9133a49..ecb4064 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -3360,6 +3360,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index a0fc73b..269cec2 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -3373,6 +3373,7 @@ CONFIG_NETFILTER_XT_TARGET_TRACE=m
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 # CONFIG_NETFS_SUPPORT is not set
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 3f98907..46a4351 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -3583,6 +3583,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 40cd31c..cd79d67 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -3563,6 +3563,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index e5215aa..5296344 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -3652,6 +3652,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index eb3c0c1..034a7ef 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -3632,6 +3632,7 @@ CONFIG_NETFILTER=y
 # CONFIG_NET_FOU is not set
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
+CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
 # CONFIG_NET_IFE is not set
 CONFIG_NET_IPGRE_BROADCAST=y
 CONFIG_NET_IPGRE_DEMUX=m
diff --git a/kernel.spec b/kernel.spec
index 3aad2d0..80e9d8a 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 396
+%define pkgrelease 397
 %define kversion 5
-%define tarfile_release 5.14.0-396.el9
+%define tarfile_release 5.14.0-397.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 396%{?buildid}%{?dist}
+%define specrelease 397%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-396.el9
+%define kabiversion 5.14.0-397.el9
 
 #
 # End of genspec.sh variables
@@ -3745,6 +3745,433 @@ fi
 #
 #
 %changelog
+* Fri Dec 08 2023 Scott Weaver <scweaver@redhat.com> [5.14.0-397.el9]
+- SUNRPC/TLS: Lock the lower_xprt during the tls handshake (Jeffrey Layton) [RHEL-7936]
+- Revert "SUNRPC dont update timeout value on connection reset" (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Fail quickly when server does not recognize TLS (Jeffrey Layton) [RHEL-7936]
+- net/handshake: remove fput() that causes use-after-free (Jeffrey Layton) [RHEL-7936]
+- handshake: Fix sign of key_serial_t fields (Jeffrey Layton) [RHEL-7936]
+- handshake: Fix sign of socket file descriptor fields (Jeffrey Layton) [RHEL-7936]
+- net/handshake: fix file ref count in handshake_nl_accept_doit() (Jeffrey Layton) [RHEL-7936]
+- NFSD: simplify error paths in nfsd_svc() (Jeffrey Layton) [RHEL-7936]
+- NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Jeffrey Layton) [RHEL-7936]
+- pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats (Jeffrey Layton) [RHEL-7936]
+- pNFS: Fix a hang in nfs4_evict_inode() (Jeffrey Layton) [RHEL-7936]
+- NFS: Fix potential oops in nfs_inode_remove_request() (Jeffrey Layton) [RHEL-7936]
+- nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op (Jeffrey Layton) [RHEL-7936]
+- nfs: decrement nrequests counter before releasing the req (Jeffrey Layton) [RHEL-7936]
+- NFSD: Fix zero NFSv4 READ results when RQ_SPLICE_OK is not set (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Fix memory leak in __sock_create() and sock_alloc_file() (Jeffrey Layton) [RHEL-7936]
+- NFSv4.1: fix zero value filehandle in post open getattr (Jeffrey Layton) [RHEL-7936]
+- NFSv4.1: fix pnfs MDS=DS session trunking (Jeffrey Layton) [RHEL-7936]
+- Revert "SUNRPC: Fail faster on bad verifier" (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Mark the cred for revalidation if the server rejects it (Jeffrey Layton) [RHEL-7936]
+- NFS/pNFS: Report EINVAL errors from connect() to the server (Jeffrey Layton) [RHEL-7936]
+- NFSD: fix possible oops when nfsd/pool_stats is closed. (Jeffrey Layton) [RHEL-7936]
+- NFS: switch back to using kill_anon_super (Jeffrey Layton) [RHEL-7936]
+- pNFS: Fix assignment of xprtdata.cred (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (Jeffrey Layton) [RHEL-7936]
+- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Jeffrey Layton) [RHEL-7936]
+- NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove return value of svc_pool_wake_idle_thread() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: make rqst_should_sleep() idempotent() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Count ingress RPC messages per svc_pool (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Clean up svc_set_num_threads (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Deduplicate thread wake-up code (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Move trace_svc_xprt_enqueue (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Add enum svc_auth_status (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: remove timeout arg from svc_recv() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: change svc_recv() to return void. (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: call svc_process() from svc_recv(). (Jeffrey Layton) [RHEL-7936]
+- nfsd: separate nfsd_last_thread() from nfsd_put() (Jeffrey Layton) [RHEL-7936]
+- nfsd: Simplify code around svc_exit_thread() call in nfsd() (Jeffrey Layton) [RHEL-7936]
+- nfsd: don't allow nfsd threads to be signalled. (Jeffrey Layton) [RHEL-7936]
+- lockd: remove SIGKILL handling (Jeffrey Layton) [RHEL-7936]
+- fs: lockd: avoid possible wrong NULL parameter (Jeffrey Layton) [RHEL-7936]
+- exportfs: remove kernel-doc warnings in exportfs (Jeffrey Layton) [RHEL-7936]
+- nfsd: inherit required unset default acls from effective set (Jeffrey Layton) [RHEL-7936]
+- lockd: nlm_blocked list race fixes (Jeffrey Layton) [RHEL-7936]
+- nfsd: set missing after_change as before_change + 1 (Jeffrey Layton) [RHEL-7936]
+- nfsd: remove unsafe BUG_ON from set_change_info (Jeffrey Layton) [RHEL-7936]
+- nfsd: handle failure to collect pre/post-op attrs more sanely (Jeffrey Layton) [RHEL-7936]
+- nfsd: add a MODULE_DESCRIPTION (Jeffrey Layton) [RHEL-7936]
+- NFSD: Rename struct svc_cacherep (Jeffrey Layton) [RHEL-7936]
+- NFSD: Remove svc_rqst::rq_cacherep (Jeffrey Layton) [RHEL-7936]
+- NFSD: Refactor the duplicate reply cache shrinker (Jeffrey Layton) [RHEL-7936]
+- NFSD: Replace nfsd_prune_bucket() (Jeffrey Layton) [RHEL-7936]
+- NFSD: Rename nfsd_reply_cache_alloc() (Jeffrey Layton) [RHEL-7936]
+- NFSD: Refactor nfsd_reply_cache_free_locked() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove net/sunrpc/auth_gss/gss_krb5_seqnum.c (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove the ->import_ctx method (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove CONFIG_RPCSEC_GSS_KRB5_CRYPTOSYSTEM (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove gss_import_v1_context() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove krb5_derive_key_v1() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove code behind CONFIG_RPCSEC_GSS_KRB5_SIMPLIFIED (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove DES and DES3 enctypes from the supported enctypes list (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove Kunit tests for the DES3 encryption type (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove RPCSEC_GSS_KRB5_ENCTYPES_DES (Jeffrey Layton) [RHEL-7936]
+- NFSD: Enable write delegation support (Jeffrey Layton) [RHEL-7936]
+- NFSD: Report zero space limit for write delegations (Jeffrey Layton) [RHEL-7936]
+- NFSD: handle GETATTR conflict with write delegation (Jeffrey Layton) [RHEL-7936]
+- NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Jeffrey Layton) [RHEL-7936]
+- NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Allow specification of TCP client connect timeout at setup (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Refactor and simplify connect timeout (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Jeffrey Layton) [RHEL-7936]
+- NFS: Fix a potential data corruption (Jeffrey Layton) [RHEL-7936]
+- nfs: fix redundant readdir request after get eof (Jeffrey Layton) [RHEL-7936]
+- nfs/blocklayout: Use the passed in gfp flags (Jeffrey Layton) [RHEL-7936]
+- filemap: Fix errors in file.c (Jeffrey Layton) [RHEL-7936]
+- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Jeffrey Layton) [RHEL-7936]
+- NFS: Move common includes outside ifdef (Jeffrey Layton) [RHEL-7936]
+- NFSD: Fix a thinko introduced by recent trace point changes (Jeffrey Layton) [RHEL-7936]
+- xprtrdma: Remove unused function declaration rpcrdma_bc_post_recv() (Jeffrey Layton) [RHEL-7936]
+- NFS: Enable the READ_PLUS operation by default (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: kmap() the xdr pages during decode (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Rework scratch handling for READ_PLUS (again) (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Fix READ_PLUS size calculations (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Fix READ_PLUS smatch warnings (Jeffrey Layton) [RHEL-7936]
+- xprtrdma: Remap Receive buffers after a reconnect (Jeffrey Layton) [RHEL-7936]
+- NFSv4: fix out path in __nfs4_get_acl_uncached (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: fix error handling in nfs42_proc_getxattr (Jeffrey Layton) [RHEL-7936]
+- NFS: Fix sysfs server name memory leak (Jeffrey Layton) [RHEL-7936]
+- NFS: Fix a use after free in nfs_direct_join_group() (Jeffrey Layton) [RHEL-7936]
+- nfsd: Fix race to FREE_STATEID and cl_revoked (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Use new helpers to handle TLS Alerts (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Send TLS Closure alerts before closing a TCP socket (Jeffrey Layton) [RHEL-7936]
+- NFSv4: Fix dropped lock for racing OPEN and delegation return (Jeffrey Layton) [RHEL-7936]
+- nfsd: Fix reading via splice (Jeffrey Layton) [RHEL-7936]
+- nfsd: Remove incorrect check in nfsd4_validate_stateid (Jeffrey Layton) [RHEL-7936]
+- NFS: Don't cleanup sysfs superblock entry if uninitialized (Jeffrey Layton) [RHEL-7936]
+- nfsd: Fix creation time serialization order (Jeffrey Layton) [RHEL-7936]
+- nfsd: remove redundant assignments to variable len (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: fix wrong shrinker_id (Jeffrey Layton) [RHEL-7936]
+- NFSv4: Clean up some shutdown loops (Jeffrey Layton) [RHEL-7936]
+- NFS: Cancel all existing RPC tasks when shutdown (Jeffrey Layton) [RHEL-7936]
+- NFS: add sysfs shutdown knob (Jeffrey Layton) [RHEL-7936]
+- NFS: add a sysfs link to the acl rpc_client (Jeffrey Layton) [RHEL-7936]
+- NFS: add a sysfs link to the lockd rpc_client (Jeffrey Layton) [RHEL-7936]
+- NFS: Add sysfs links to sunrpc clients for nfs_clients (Jeffrey Layton) [RHEL-7936]
+- NFS: add superblock sysfs entries (Jeffrey Layton) [RHEL-7936]
+- NFS: Make all of /sys/fs/nfs network-namespace unique (Jeffrey Layton) [RHEL-7936]
+- NFS: Open-code the nfs_kset kset_create_and_add() (Jeffrey Layton) [RHEL-7936]
+- NFS: rename nfs_client_kobj to nfs_net_kobj (Jeffrey Layton) [RHEL-7936]
+- NFS: rename nfs_client_kset to nfs_kset (Jeffrey Layton) [RHEL-7936]
+- NFS: Add an "xprtsec=" NFS mount option (Jeffrey Layton) [RHEL-7936]
+- NFS: Have struct nfs_client carry a TLS policy field (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Add a TCP-with-TLS RPC transport class (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Capture CMSG metadata on client-side receive (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Ignore data_ready callbacks during TLS handshakes (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Add RPC client support for the RPC_AUTH_TLS auth flavor (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Trace the rpc_create_args (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Plumb an API for setting transport layer security (Jeffrey Layton) [RHEL-7936]
+- NFS: Improvements for fs_context-related tracepoints (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: attempt to reach rpcbind with an abstract socket name (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: support abstract unix socket addresses (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: SETXATTR should update ctime (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Clean up xattr size macros (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Clean up nfs4_xdr_dec_*xattr() functions (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Clean up: Move nfs4_xdr_enc_*xattr() functions (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Clean up: move decode_*xattr() functions (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Clean up: Move the encode_copy_commit() function (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Fix stale comment (Jeffrey Layton) [RHEL-7936]
+- NFSD: Distinguish per-net namespace initialization (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Address RCU warning in net/sunrpc/svc.c (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Use sysfs_emit in place of strlcpy/sprintf (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove transport class dprintk call sites (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Fix comments for transport class registration (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Remove an unused argument from __svc_rdma_put_rw_ctxt() (Jeffrey Layton) [RHEL-7936]
+- svcrdma: trace cc_release calls (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Convert "might sleep" comment into a code annotation (Jeffrey Layton) [RHEL-7936]
+- NFSD: Add an nfsd4_encode_nfstime4() helper (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Move initialization of rq_stime (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Optimize page release in svc_rdma_sendto() (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Prevent page release when nothing was received (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Revert 2a1e4f21d841 ("svcrdma: Normalize Send page handling") (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Revert 579900670ac7 ("svcrdma: Remove unused sc_pages field") (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Revert cc93ce9529a6 ("svcrdma: Retain the page backing rq_res.head[0].iov_base") (Jeffrey Layton) [RHEL-7936]
+- NFSD: add encoding of op_recall flag for write delegation (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Clean up allocation of svc_rdma_rw_ctxt (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Clean up allocation of svc_rdma_send_ctxt (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Clean up allocation of svc_rdma_recv_ctxt (Jeffrey Layton) [RHEL-7936]
+- svcrdma: Allocate new transports on device's NUMA node (Jeffrey Layton) [RHEL-7936]
+- nfsd: don't provide pre/post-op attrs if fh_getattr fails (Jeffrey Layton) [RHEL-7936]
+- NFSD: Remove nfsd_readv() (Jeffrey Layton) [RHEL-7936]
+- NFSD: Hoist rq_vec preparation into nfsd_read() [step two] (Jeffrey Layton) [RHEL-7936]
+- NFSD: Hoist rq_vec preparation into nfsd_read() (Jeffrey Layton) [RHEL-7936]
+- NFSD: Update rq_next_page between COMPOUND operations (Jeffrey Layton) [RHEL-7936]
+- NFSD: Use svcxdr_encode_opaque_pages() in nfsd4_encode_splice_read() (Jeffrey Layton) [RHEL-7936]
+- NFSD: Ensure that xdr_write_pages updates rq_next_page (Jeffrey Layton) [RHEL-7936]
+- NFSD: Replace encode_cinfo() (Jeffrey Layton) [RHEL-7936]
+- NFSD: Add encoders for NFSv4 clientids and verifiers (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Use __alloc_bulk_pages() in svc_init_buffer() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Resupply rq_pages from node-local memory (Jeffrey Layton) [RHEL-7936]
+- NFSD: trace nfsctl operations (Jeffrey Layton) [RHEL-7936]
+- NFSD: Clean up nfsctl_transaction_write() (Jeffrey Layton) [RHEL-7936]
+- NFSD: Clean up nfsctl white-space damage (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Trace struct svc_sock lifetime events (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Improve observability in svc_tcp_accept() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Remove dprintk() in svc_handle_xprt() (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Fix an incorrect comment (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Jeffrey Layton) [RHEL-7936]
+- exportfs: check for error return value from exportfs_encode_*() (Jeffrey Layton) [RHEL-7936]
+- NFS: Prefer strscpy over strlcpy calls (Jeffrey Layton) [RHEL-7936]
+- exportfs: add explicit flag to request non-decodeable file handles (Jeffrey Layton) [RHEL-7936]
+- exportfs: change connectable argument to bit flags (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Fix a potential double free with READ_PLUS (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Fix error handling in svc_setup_socket() (Jeffrey Layton) [RHEL-7936]
+- nfsd: define exports_proc_ops with CONFIG_PROC_FS (Jeffrey Layton) [RHEL-7936]
+- NFSv4.2: Rework scratch handling for READ_PLUS (Jeffrey Layton) [RHEL-7936]
+- NFSD: Handle new xprtsec= export option (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Support TLS handshake in the server-side TCP socket code (Jeffrey Layton) [RHEL-7936]
+- NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Clear rq_xid when receiving a new RPC Call (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Be even lazier about releasing pages (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Convert svc_xprt_release() to the release_pages() API (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Relocate svc_free_res_pages() (Jeffrey Layton) [RHEL-7936]
+- nfsd: simplify the delayed disposal list code (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Ignore return value of ->xpo_sendto (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Ensure server-side sockets have a sock->file (Jeffrey Layton) [RHEL-7936]
+- NFSD: Watch for rq_pages bounds checking errors in nfsd_splice_actor() (Jeffrey Layton) [RHEL-7936]
+- sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Jeffrey Layton) [RHEL-7936]
+- lockd: drop inappropriate svc_get() from locked_get() (Jeffrey Layton) [RHEL-7936]
+- NFSD: Convert filecache to rhltable (Jeffrey Layton) [RHEL-7936]
+- nfsd: allow reaping files still under writeback (Jeffrey Layton) [RHEL-7936]
+- nfsd: update comment over __nfsd_file_cache_purge (Jeffrey Layton) [RHEL-7936]
+- nfsd: don't take/put an extra reference when putting a file (Jeffrey Layton) [RHEL-7936]
+- nfsd: add some comments to nfsd_file_do_acquire (Jeffrey Layton) [RHEL-7936]
+- nfsd: don't kill nfsd_files because of lease break error (Jeffrey Layton) [RHEL-7936]
+- nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator (Jeffrey Layton) [RHEL-7936]
+- nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries (Jeffrey Layton) [RHEL-7936]
+- nfsd: don't open-code clear_and_wake_up_bit (Jeffrey Layton) [RHEL-7936]
+- nfs: simplify two-level sysctl registration for nfs_cb_sysctls (Jeffrey Layton) [RHEL-7936]
+- nfs: simplify two-level sysctl registration for nfs4_cb_sysctls (Jeffrey Layton) [RHEL-7936]
+- lockd: simplify two-level sysctl registration for nlm_sysctls (Jeffrey Layton) [RHEL-7936]
+- NFS: Convert the readdir array-of-pages into an array-of-folios (Jeffrey Layton) [RHEL-7936]
+- NFSv3: handle out-of-order write replies. (Jeffrey Layton) [RHEL-7936]
+- nfs: remove empty if statement from nfs3_prepare_get_acl (Jeffrey Layton) [RHEL-7936]
+- locks: allow support for write delegation (Jeffrey Layton) [RHEL-7936]
+- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Jeffrey Layton) [RHEL-7936]
+- fs/locks: Remove redundant assignment to cmd (Jeffrey Layton) [RHEL-7936]
+- net/handshake: fix null-ptr-deref in handshake_nl_done_doit() (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Unpin sock->file if a handshake is cancelled (Jeffrey Layton) [RHEL-7936]
+- net/tls: Add TLS Alert definitions (Jeffrey Layton) [RHEL-7936]
+- net/tls: Move TLS protocol elements to a separate header (Jeffrey Layton) [RHEL-7936]
+- SUNRPC: Recognize control messages in server-side TCP socket code (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Trace events for TLS Alert helpers (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Add helpers for parsing incoming TLS Alerts (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Add API for sending TLS Closure alerts (Jeffrey Layton) [RHEL-7936]
+- net/tls: implement ->read_sock() (Jeffrey Layton) [RHEL-7936]
+- net/tls: split tls_rx_reader_lock (Jeffrey Layton) [RHEL-7936]
+- net/tls: Use tcp_read_sock() instead of ops->read_sock() (Jeffrey Layton) [RHEL-7936]
+- selftests/net/tls: add test for MSG_EOR (Jeffrey Layton) [RHEL-7936]
+- net/tls: handle MSG_EOR for tls_device TX flow (Jeffrey Layton) [RHEL-7936]
+- net/tls: handle MSG_EOR for tls_sw TX flow (Jeffrey Layton) [RHEL-7936]
+- net/handshake: remove fput() that causes use-after-free (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Enable the SNI extension to work properly (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Unpin sock->file if a handshake is cancelled (Jeffrey Layton) [RHEL-7936]
+- net/handshake: handshake_genl_notify() shouldn't ignore @flags (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Fix uninitialized local variable (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Fix handshake_dup() ref counting (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Remove unneeded check from handshake_dup() (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Fix sock->file allocation (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Squelch allocation warning during Kunit test (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Fix section mismatch in handshake_exit (Jeffrey Layton) [RHEL-7936]
+- RHEL: add config setting for CONFIG_NET_HANDSHAKE_KUNIT_TEST (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Add Kunit tests for the handshake consumer API (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Add a kernel API for requesting a TLSv1.3 handshake (Jeffrey Layton) [RHEL-7936]
+- net/handshake: Create a NETLINK service for handling handshake requests (Jeffrey Layton) [RHEL-7936]
+- x86/microcode/intel: Reuse intel_cpu_collect_info() (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Rework intel_find_matching_signature() (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Rework intel_cpu_collect_info() (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: ARRAY BIST for Sierra Forest (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: Add new error code (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: Add new CPU support (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: Metadata validation for start_chunk (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: Validate image size (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: Gen2 Scan test support (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: Gen2 scan image loading (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: Refactor image loading code (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: Store IFS generation number (David Arcari) [RHEL-15512]
+- platform/x86/intel/ifs: release cpus_read_lock() (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Unify microcode apply() functions (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Switch to kvmalloc() (David Arcari) [RHEL-15512]
+- mm: new primitive kvmemdup() (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Save the microcode only after a successful late-load (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Simplify early loading (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Cleanup code further (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Simplify and rename generic_load_microcode() (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Simplify scan_microcode() (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Rip out mixed stepping support for Intel CPUs (David Arcari) [RHEL-15512]
+- x86/microcode/32: Move early loading after paging enable (David Arcari) [RHEL-15512]
+- s390/smp: disallow CPU hotplug of CPU 0 (David Arcari) [RHEL-15512]
+- x86/smpboot: Get rid of cpu_init_secondary() (David Arcari) [RHEL-15512]
+- x86/smpboot: Split up native_cpu_up() into separate phases and document them (David Arcari) [RHEL-15512]
+- x86/smpboot: Remove unnecessary barrier() (David Arcari) [RHEL-15512]
+- x86/smpboot: Restrict soft_restart_cpu() to SEV (David Arcari) [RHEL-15512]
+- x86/smpboot: Remove the CPU0 hotplug kludge (David Arcari) [RHEL-15512]
+- x86/topology: Remove CPU0 hotplug option (David Arcari) [RHEL-15512]
+- x86/smpboot: Rename start_cpu0() to soft_restart_cpu() (David Arcari) [RHEL-15512]
+- x86/smpboot: Avoid pointless delay calibration if TSC is synchronized (David Arcari) [RHEL-15512]
+- cpu/hotplug: Mark arch_disable_smp_support() and bringup_nonboot_cpus() __init (David Arcari) [RHEL-15512]
+- x86/smpboot: Cleanup topology_phys_to_logical_pkg()/die() (David Arcari) [RHEL-15512]
+- smpboot: use atomic_try_cmpxchg in cpu_wait_death and cpu_report_death (David Arcari) [RHEL-15512]
+- x86/aperfperf: Make it correct on 32bit and UP kernels (David Arcari) [RHEL-15512]
+- x86/aperfmperf: Make parts of the frequency invariance code unconditional (David Arcari) [RHEL-15512]
+- x86/aperfmperf: Restructure arch_scale_freq_tick() (David Arcari) [RHEL-15512]
+- x86/aperfmperf: Put frequency invariance aperf/mperf data into a struct (David Arcari) [RHEL-15512]
+- x86/aperfmperf: Untangle Intel and AMD frequency invariance init (David Arcari) [RHEL-15512]
+- x86/aperfmperf: Separate AP/BP frequency invariance init (David Arcari) [RHEL-15512]
+- x86/smp: Move APERF/MPERF code where it belongs (David Arcari) [RHEL-15512]
+- x86/aperfmperf: Dont wake idle CPUs in arch_freq_get_on_cpu() (David Arcari) [RHEL-15512]
+- cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state (David Arcari) [RHEL-15512]
+- cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (David Arcari) [RHEL-15512]
+- x86/ACPI: CPPC: Move init_freq_invariance_cppc() into x86 CPPC (David Arcari) [RHEL-15512]
+- x86: Expose init_freq_invariance() to topology header (David Arcari) [RHEL-15512]
+- x86/ACPI: CPPC: Move AMD maximum frequency ratio setting function into x86 CPPC (David Arcari) [RHEL-15512]
+- x86/ACPI: CPPC: Rename cppc_msr.c to cppc.c (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Remove pointless mutex (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Remove debug code (David Arcari) [RHEL-15512]
+- x86/microcode: Move core specific defines to local header (David Arcari) [RHEL-15512]
+- x86/microcode: Make reload_early_microcode() static (David Arcari) [RHEL-15512]
+- x86/microcode: Hide the config knob (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Rename get_datasize() since its used externally (David Arcari) [RHEL-15512]
+- x86/microcode: Include vendor headers into microcode.h (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Move microcode functions out of cpu/intel.c (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Print old and new revision during early boot (David Arcari) [RHEL-15512]
+- x86/microcode/intel: Pass the microcode revision to print_ucode_info() directly (David Arcari) [RHEL-15512]
+- i40e: Change user notification of non-SFP module in i40e_get_module_info() (Michal Schmidt) [RHEL-15786]
+- ixgbe: Remove unused function declarations (Ken Cox) [2222752]
+- ixgbe: Fix panic during XDP_TX with > 64 CPUs (Ken Cox) [2222752]
+- ixgbe: Enable setting RSS table to default values (Ken Cox) [2222752]
+- ixgbe: Allow flow hash to be set via ethtool (Ken Cox) [2222752]
+- ixgbe: Remove unnecessary aer.h include (Ken Cox) [2222752]
+- ixgbe: Separate C22 and C45 transactions (Ken Cox) [2222752]
+- drivers: net: slip: fix NPD bug in sl_tx_timeout() (Michal Schmidt) [RHEL-6654] {CVE-2022-41858}
+- crypto: qat - prevent underflow in rp2srv_store() (Vladis Dronov) [RHEL-15640]
+- crypto: qat - fix deadlock in backlog processing (Vladis Dronov) [RHEL-15640]
+- crypto: qat - move adf_cfg_services (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add num_rps sysfs attribute (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add rp2svc sysfs attribute (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add rate limiting sysfs interface (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add rate limiting feature to qat_4xxx (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add retrieval of fw capabilities (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add bits.h to icp_qat_hw.h (Vladis Dronov) [RHEL-15640]
+- crypto: qat - move admin api (Vladis Dronov) [RHEL-15640]
+- crypto: qat - fix ring to service map for QAT GEN4 (Vladis Dronov) [RHEL-15640]
+- crypto: qat - use masks for AE groups (Vladis Dronov) [RHEL-15640]
+- crypto: qat - refactor fw config related functions (Vladis Dronov) [RHEL-15640]
+- crypto: qat - count QAT GEN4 errors (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add error counters (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add handling of errors from ERRSOU3 for QAT GEN4 (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add adf_get_aram_base() helper function (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add handling of compression related errors for QAT GEN4 (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add handling of errors from ERRSOU2 for QAT GEN4 (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add reporting of errors from ERRSOU1 for QAT GEN4 (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add reporting of correctable errors for QAT GEN4 (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add infrastructure for error reporting (Vladis Dronov) [RHEL-15640]
+- crypto: qat - fix double free during reset (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add cnv_errors debugfs file (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add pm_status debugfs file (Vladis Dronov) [RHEL-15640]
+- crypto: qat - refactor included headers (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add namespace to driver (Vladis Dronov) [RHEL-15640]
+- crypto: qat - Remove zlib-deflate (Vladis Dronov) [RHEL-15640]
+- crypto: qat - increase size of buffers (Vladis Dronov) [RHEL-15640]
+- crypto: qat - enable dc chaining service (Vladis Dronov) [RHEL-15640]
+- crypto: qat - consolidate services structure (Vladis Dronov) [RHEL-15640]
+- crypto: qat - fix unregistration of compression algorithms (Vladis Dronov) [RHEL-15640]
+- crypto: qat - fix unregistration of crypto algorithms (Vladis Dronov) [RHEL-15640]
+- crypto: qat - do not shadow error code (Vladis Dronov) [RHEL-15640]
+- crypto: qat - refactor deprecated strncpy (Vladis Dronov) [RHEL-15640]
+- crypto: qat - Use list_for_each_entry() helper (Vladis Dronov) [RHEL-15640]
+- Documentation: ABI: debugfs-driver-qat: fix fw_counters path (Vladis Dronov) [RHEL-15640]
+- crypto: qat - fix crypto capability detection for 4xxx (Vladis Dronov) [RHEL-15640]
+- crypto: qat - Remove unused function declarations (Vladis Dronov) [RHEL-15640]
+- crypto: qat - use kfree_sensitive instead of memset/kfree() (Vladis Dronov) [RHEL-15640]
+- crypto: qat - replace the if statement with min() (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add heartbeat counters check (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add heartbeat feature (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add measure clock frequency (Vladis Dronov) [RHEL-15640]
+- crypto: qat - drop obsolete heartbeat interface (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add internal timer for qat 4xxx (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add fw_counters debugfs file (Vladis Dronov) [RHEL-15640]
+- crypto: qat - change value of default idle filter (Vladis Dronov) [RHEL-15640]
+- crypto: qat - do not export adf_init_admin_pm() (Vladis Dronov) [RHEL-15640]
+- crypto: qat - expose pm_idle_enabled through sysfs (Vladis Dronov) [RHEL-15640]
+- crypto: qat - extend configuration for 4xxx (Vladis Dronov) [RHEL-15640]
+- crypto: qat - refactor fw config logic for 4xxx (Vladis Dronov) [RHEL-15640]
+- crypto: qat - make fw images name constant (Vladis Dronov) [RHEL-15640]
+- crypto: qat - move returns to default case (Vladis Dronov) [RHEL-15640]
+- crypto: qat - unmap buffers before free for RSA (Vladis Dronov) [RHEL-15640]
+- crypto: qat - unmap buffer before free for DH (Vladis Dronov) [RHEL-15640]
+- crypto: qat - update slice mask for 4xxx devices (Vladis Dronov) [RHEL-15640]
+- crypto: qat - set deprecated capabilities as reserved (Vladis Dronov) [RHEL-15640]
+- crypto: qat - add missing function declaration in adf_dbgfs.h (Vladis Dronov) [RHEL-15640]
+- crypto: qat - move dbgfs init to separate file (Vladis Dronov) [RHEL-15640]
+- crypto: qat - Move driver to drivers/crypto/intel/qat (Vladis Dronov) [RHEL-15640]
+- crypto: ixp4xx - Move driver to drivers/crypto/intel/ixp4xx (Vladis Dronov) [RHEL-15640]
+- crypto: keembay - Move driver to drivers/crypto/intel/keembay (Vladis Dronov) [RHEL-15640]
+- crypto: keembay-ocs-ecc - Fix error return code in kmb_ocs_ecc_probe() (Vladis Dronov) [RHEL-15640]
+- MAINTAINERS: rectify entry for INTEL KEEM BAY OCS ECC CRYPTO DRIVER (Vladis Dronov) [RHEL-15640]
+- crypto: keembay-ocs-ecc - Add Keem Bay OCS ECC Driver (Vladis Dronov) [RHEL-15640]
+- dt-bindings: crypto: Add Keem Bay ECC bindings (Vladis Dronov) [RHEL-15640]
+- crypto: qat - fix apply custom thread-service mapping for dc service (Vladis Dronov) [RHEL-15640]
+- crypto: qat - make state machine functions static (Vladis Dronov) [RHEL-15640]
+- crypto: qat - refactor device restart logic (Vladis Dronov) [RHEL-15640]
+- crypto: rsa-pkcs1pad - Use helper to set reqsize (Vladis Dronov) [RHEL-15640]
+- units: complement the set of Hz units (Vladis Dronov) [RHEL-15640]
+- units: Add BYTES_PER_*BIT (Vladis Dronov) [RHEL-15640]
+- units: change from 'L' to 'UL' (Vladis Dronov) [RHEL-15640]
+- amd_hsmp: Add HSMP protocol version 5 messages (John Allen) [2072239]
+- PCI: Disable ATS for specific Intel IPU E2000 devices (Michal Schmidt) [RHEL-16608]
+- PCI: Extract ATS disabling to a helper function (Michal Schmidt) [RHEL-16608]
+- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Phil Sutter) [RHEL-5434] {CVE-2023-42756}
+- exfat: release s_lock before calling dir_emit() (Pavel Reichl) [RHEL-9653]
+- exfat: fix the newly allocated clusters are not freed in error handling (Pavel Reichl) [RHEL-9653]
+- exfat: don't print error log in normal case (Pavel Reichl) [RHEL-9653]
+- exfat: remove unneeded code from exfat_alloc_cluster() (Pavel Reichl) [RHEL-9653]
+- exfat: handle unreconized benign secondary entries (Pavel Reichl) [RHEL-9653]
+- exfat: fix inode->i_blocks for non-512 byte sector size device (Pavel Reichl) [RHEL-9653]
+- exfat: redefine DIR_DELETED as the bad cluster number (Pavel Reichl) [RHEL-9653]
+- exfat: fix reporting fs error when reading dir beyond EOF (Pavel Reichl) [RHEL-9653]
+- exfat: fix unexpected EOF while reading dir (Pavel Reichl) [RHEL-9653]
+- exfat: reuse exfat_find_location() to simplify exfat_get_dentry_set() (Pavel Reichl) [RHEL-9653]
+- exfat: fix overflow in sector and cluster conversion (Pavel Reichl) [RHEL-9653]
+- exfat: remove i_size_write() from __exfat_truncate() (Pavel Reichl) [RHEL-9653]
+- exfat: remove argument 'size' from exfat_truncate() (Pavel Reichl) [RHEL-9653]
+- exfat: remove unnecessary arguments from exfat_find_dir_entry() (Pavel Reichl) [RHEL-9653]
+- exfat: remove unneeded codes from __exfat_rename() (Pavel Reichl) [RHEL-9653]
+- exfat: remove call ilog2() from exfat_readdir() (Pavel Reichl) [RHEL-9653]
+- exfat: replace magic numbers with Macros (Pavel Reichl) [RHEL-9653]
+- exfat: rename exfat_free_dentry_set() to exfat_put_dentry_set() (Pavel Reichl) [RHEL-9653]
+- exfat: move exfat_entry_set_cache from heap to stack (Pavel Reichl) [RHEL-9653]
+- exfat: support dynamic allocate bh for exfat_entry_set_cache (Pavel Reichl) [RHEL-9653]
+- exfat: reduce the size of exfat_entry_set_cache (Pavel Reichl) [RHEL-9653]
+- exfat: hint the empty entry which at the end of cluster chain (Pavel Reichl) [RHEL-9653]
+- exfat: simplify empty entry hint (Pavel Reichl) [RHEL-9653]
+- exfat: fix overflow for large capacity partition (Pavel Reichl) [RHEL-9653]
+- exfat_iterate(): don't open-code file_inode(file) (Pavel Reichl) [RHEL-9653]
+- exfat: Drop superfluous new line for error messages (Pavel Reichl) [RHEL-9653]
+- exfat: Downgrade ENAMETOOLONG error message to debug messages (Pavel Reichl) [RHEL-9653]
+- exfat: Expand exfat_err() and co directly to pr_*() macro (Pavel Reichl) [RHEL-9653]
+- exfat: Define NLS_NAME_* as bit flags explicitly (Pavel Reichl) [RHEL-9653]
+- exfat: Return ENAMETOOLONG consistently for oversized paths (Pavel Reichl) [RHEL-9653]
+- exfat: remove duplicate write inode for extending dir/file (Pavel Reichl) [RHEL-9653]
+- exfat: remove duplicate write inode for truncating file (Pavel Reichl) [RHEL-9653]
+- exfat: reuse __exfat_write_inode() to update directory entry (Pavel Reichl) [RHEL-9653]
+- exfat: reduce block requests when zeroing a cluster (Pavel Reichl) [RHEL-9653]
+- exfat: introduce mount option 'sys_tz' (Pavel Reichl) [RHEL-9653]
+- exfat: do not clear VolumeDirty in writeback (Pavel Reichl) [RHEL-9653]
+- exfat: allow access to paths with trailing dots (Pavel Reichl) [RHEL-9653]
+- exfat: fix missing REQ_SYNC in exfat_update_bhs() (Pavel Reichl) [RHEL-9653]
+- exfat: remove argument 'sector' from exfat_get_dentry() (Pavel Reichl) [RHEL-9653]
+- exfat: move super block magic number to magic.h (Pavel Reichl) [RHEL-9653]
+- exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() (Pavel Reichl) [RHEL-9653]
+- exfat: make exfat_find_location() static (Pavel Reichl) [RHEL-9653]
+- exfat: fix typos in comments (Pavel Reichl) [RHEL-9653]
+- block: add sync_blockdev_range() (Pavel Reichl) [RHEL-9653]
+
 * Thu Dec 07 2023 Scott Weaver <scweaver@redhat.com> [5.14.0-396.el9]
 - sched/core: Fix RQCF_ACT_SKIP leak (Phil Auld) [RHEL-15489]
 - gfs2: Fix quota=quiet oversight (Bob Peterson) [2224067]
diff --git a/mod-internal.list b/mod-internal.list
index 07f90c3..1173cae 100644
--- a/mod-internal.list
+++ b/mod-internal.list
@@ -82,3 +82,4 @@ hashtable_test
 strcat_kunit
 strscpy_kunit
 siphash_kunit
+handshake-test
diff --git a/sources b/sources
index a2fd1c5..c33ff07 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-396.el9.tar.xz) = 51d52ba6a4081691317535658e5b6cd3657954c7009d3a0145684b1d20b4f6127e8832eada74e820a72f3d30ee45f94d8ff00503783fc72896f5a17735bd2544
-SHA512 (kernel-abi-stablelists-5.14.0-396.el9.tar.bz2) = 121d707ce69a2ad00bd99cc33ecc9f20c2067ec3d6086704f9845828a467631d696160e23acf0f246ed7a341a54502840d97a72e8c4a376a22592866c62a9345
-SHA512 (kernel-kabi-dw-5.14.0-396.el9.tar.bz2) = add1f8fcbd32d3f23fa2ddf417718f4ed905a72c6ed2de0b27fab4c699abeafd416801b1af6c6e85230398f0c6c89b6384a0614713a8265163a3eaf74677ec7c
+SHA512 (linux-5.14.0-397.el9.tar.xz) = 469f19bd8ff7a46aa579996b69db68857ad8af57dff26bab305369530d5b68722b8f1d43dec88e39b2ec0291a18d4dbfa828091303aa2ddb832783dbc363b251
+SHA512 (kernel-abi-stablelists-5.14.0-397.el9.tar.bz2) = c17b39a883a5b910c54342b70362e5fae52977f3758e8197aae627e1855ede82e980349c367291c73c0d2d27d7fa66b69341c147c5edc929c2a0dc284526969f
+SHA512 (kernel-kabi-dw-5.14.0-397.el9.tar.bz2) = d83c4114aa0b40d12f9f7b02b744415a48fe4e94c81d13f13c6bc30cdd3d1cf2bdeeb0190182da53c9fd6bd8990a852d7f944744da3227804442048f39b715b2