kernel-6.12.0-230.9.el10nv

* Tue May 19 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-230.9.el10nv] - Merge tag 'kernel-6.12.0-230.el10' into main-aie-nv (Jan Stancek) [VOYAGER-551] - ptrace: slightly saner 'get_dumpable()' logic (Jan Stancek) [VOYAGER-826] {CVE-2026-46333} Resolves: VOYAGER-551, VOYAGER-826 Signed-off-by: Jan Stancek <jstancek@redhat.com>
2026-05-19 23:50:37 +02:00 · 2026-05-19 23:50:37 +02:00 · 12c1810774
commit 12c1810774
parent 9067683ea2
23 changed files with 545 additions and 13 deletions
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@ -12,7 +12,7 @@ RHEL_MINOR = 3
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 228
+RHEL_RELEASE = 230

 #
 # RHEL_REBASE_NUM
@ -41,4 +41,4 @@ AUTOMOTIVE_MINOR = 1
 # ---------------------------
 #
 # Set DERIVATIVE_STREAM to "yes" to enable derivative kernel versioning.
-DERIVATIVE_BUILD = 8
+DERIVATIVE_BUILD = 9
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@ -1486,6 +1486,7 @@ CONFIG_DEBUG_SPINLOCK=y
 CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@ -1478,6 +1478,7 @@ CONFIG_DEBUG_SHIRQ=y
 # CONFIG_DEBUG_STACK_USAGE is not set
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@ -1486,6 +1486,7 @@ CONFIG_DEBUG_SPINLOCK=y
 CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@ -1478,6 +1478,7 @@ CONFIG_DEBUG_SHIRQ=y
 # CONFIG_DEBUG_STACK_USAGE is not set
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@ -1488,6 +1488,7 @@ CONFIG_DEBUG_SPINLOCK=y
 CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@ -1480,6 +1480,7 @@ CONFIG_DEBUG_SHIRQ=y
 # CONFIG_DEBUG_STACK_USAGE is not set
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@ -1486,6 +1486,7 @@ CONFIG_DEBUG_SPINLOCK=y
 CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@ -1478,6 +1478,7 @@ CONFIG_DEBUG_SHIRQ=y
 # CONFIG_DEBUG_STACK_USAGE is not set
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@ -1236,6 +1236,7 @@ CONFIG_DEBUG_STACKOVERFLOW=y
 CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
 # CONFIG_DEBUG_VM_PGFLAGS is not set
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@ -1228,6 +1228,7 @@ CONFIG_DEBUG_STACKOVERFLOW=y
 # CONFIG_DEBUG_STACK_USAGE is not set
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-riscv64-debug-rhel.config
+++ b/kernel-riscv64-debug-rhel.config
@ -1245,6 +1245,7 @@ CONFIG_DEBUG_SPINLOCK=y
 CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
 # CONFIG_DEBUG_VM_PGFLAGS is not set
--- a/kernel-riscv64-rhel.config
+++ b/kernel-riscv64-rhel.config
@ -1237,6 +1237,7 @@ CONFIG_DEBUG_SHIRQ=y
 # CONFIG_DEBUG_STACK_USAGE is not set
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@ -1241,6 +1241,7 @@ CONFIG_DEBUG_SPINLOCK=y
 CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
 # CONFIG_DEBUG_VM_PGFLAGS is not set
@ -5430,7 +5431,7 @@ CONFIG_SCHED_TOPOLOGY_VERTICAL=y
 CONFIG_SCHED_TOPOLOGY=y
 CONFIG_SCHED_TRACER=y
 CONFIG_SCLP_CONSOLE=y
-# CONFIG_SCLP_OFB is not set
+CONFIG_SCLP_OFB=y
 CONFIG_SCLP_TTY=y
 CONFIG_SCLP_VT220_CONSOLE=y
 CONFIG_SCLP_VT220_TTY=y
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@ -1233,6 +1233,7 @@ CONFIG_DEBUG_SHIRQ=y
 # CONFIG_DEBUG_STACK_USAGE is not set
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
@ -5408,7 +5409,7 @@ CONFIG_SCHED_TOPOLOGY_VERTICAL=y
 CONFIG_SCHED_TOPOLOGY=y
 CONFIG_SCHED_TRACER=y
 CONFIG_SCLP_CONSOLE=y
-# CONFIG_SCLP_OFB is not set
+CONFIG_SCLP_OFB=y
 CONFIG_SCLP_TTY=y
 CONFIG_SCLP_VT220_CONSOLE=y
 CONFIG_SCLP_VT220_TTY=y
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@ -1234,6 +1234,7 @@ CONFIG_DEBUG_SECTION_MISMATCH=y
 # CONFIG_DEBUG_STACK_USAGE is not set
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
@ -5423,7 +5424,7 @@ CONFIG_SCHED_TOPOLOGY_VERTICAL=y
 CONFIG_SCHED_TOPOLOGY=y
 CONFIG_SCHED_TRACER=y
 CONFIG_SCLP_CONSOLE=y
-# CONFIG_SCLP_OFB is not set
+CONFIG_SCLP_OFB=y
 CONFIG_SCLP_TTY=y
 CONFIG_SCLP_VT220_CONSOLE=y
 CONFIG_SCLP_VT220_TTY=y
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@ -1305,6 +1305,7 @@ CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
 # CONFIG_DEBUG_TLBFLUSH is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
 # CONFIG_DEBUG_VM_PGFLAGS is not set
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@ -1297,6 +1297,7 @@ CONFIG_DEBUG_STACKOVERFLOW=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
 # CONFIG_DEBUG_TLBFLUSH is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@ -1307,6 +1307,7 @@ CONFIG_DEBUG_STACK_USAGE=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
 # CONFIG_DEBUG_TLBFLUSH is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
 # CONFIG_DEBUG_VM_PGFLAGS is not set
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@ -1299,6 +1299,7 @@ CONFIG_DEBUG_STACKOVERFLOW=y
 # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
 # CONFIG_DEBUG_TIMEKEEPING is not set
 # CONFIG_DEBUG_TLBFLUSH is not set
+# CONFIG_DEBUG_VFS is not set
 # CONFIG_DEBUG_VIRTUAL is not set
 # CONFIG_DEBUG_VM is not set
 # CONFIG_DEBUG_VM_MAPLE_TREE is not set
--- a/kernel.changelog
+++ b/kernel.changelog
@ -1,10 +1,15 @@
+* Tue May 19 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-230.9.el10nv]
+- Merge tag 'kernel-6.12.0-230.el10' into main-aie-nv (Jan Stancek) [VOYAGER-551]
+- ptrace: slightly saner 'get_dumpable()' logic (Jan Stancek) [VOYAGER-826] {CVE-2026-46333}
+Resolves: VOYAGER-551, VOYAGER-826
+
 * Fri May 15 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-228.8.el10nv]
 - Merge tag 'kernel-6.12.0-228.el10' into main-aie-nv (Jan Stancek) [VOYAGER-551]
 - NVIDIA: SAUCE: sched/fair: Add SIS_UTIL support to select_idle_capacity() (Phil Auld) [VOYAGER-732]
 - NVIDIA: SAUCE: sched/fair: Reject misfit pulls onto busy SMT siblings on asym-capacity (Phil Auld) [VOYAGER-732]
 - NVIDIA: SAUCE: sched/fair: Prefer fully-idle SMT cores in asym-capacity idle selection (Phil Auld) [VOYAGER-732]
 - NVIDIA: SAUCE: sched/fair: Attach sched_domain_shared to sd_asym_cpucapacity (Phil Auld) [VOYAGER-732]
-Resolves: VOYAGER-551
+Resolves: VOYAGER-551, VOYAGER-732

 * Tue May 12 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-226.7.el10nv]
 - Merge tag 'kernel-6.12.0-226.el10' into main-aie-nv (Jan Stancek) [VOYAGER-551]
@ -126,6 +131,259 @@ Resolves: VOYAGER-551
 - redhat: set up initial Makefile.variables (Jan Stancek)
 Resolves: VOYAGER-10, VOYAGER-286, VOYAGER-488, VOYAGER-494, VOYAGER-551, VOYAGER-75

+* Tue May 19 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-230.el10]
+- powercap: intel_rapl: Add support for Nova Lake processors (Steve Best) [RHEL-117269]
+- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171638]
+- selftests/bpf: Ensure typedef are deduplicated in split BTF (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix deduplication of typedef with base definitions (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs (Jerome Marchand) [RHEL-139985]
+- bpf: Remove static qualifier from local subprog pointer (Jerome Marchand) [RHEL-139985]
+- bpf: Fix ld_{abs,ind} failure path analysis in subprogs (Jerome Marchand) [RHEL-139985]
+- bpf: Propagate error from visit_tailcall_insn (Jerome Marchand) [RHEL-139985]
+- ftrace,bpf: Remove FTRACE_OPS_FL_JMP ftrace_ops flag (Jerome Marchand) [RHEL-139985]
+- ftrace: Fix address for jmp mode in t_show() (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: add regression test for bpf_d_path() (Jerome Marchand) [RHEL-139985]
+- bpf: Fix verifier assumptions of bpf_d_path's output buffer (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add test for truncated dmabuf_iter reads (Jerome Marchand) [RHEL-139985]
+- bpf: Fix truncated dmabuf iterator reads (Jerome Marchand) [RHEL-139985]
+- x86/unwind/orc: Support reliable unwinding through BPF stack frames (Jerome Marchand) [RHEL-139985]
+- bpf: Add bpf_has_frame_pointer() (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix -Wdiscarded-qualifiers under C23 (Jerome Marchand) [RHEL-139985]
+- bpftool: Fix build warnings due to MS extensions (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add -fms-extensions to bpf build flags (Jerome Marchand) [RHEL-139985]
+- bpf: optimize bpf_map_update_elem() for map-in-map types (Jerome Marchand) [RHEL-139985]
+- bpf: make kprobe_multi_link_prog_run always_inline (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add success stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Precede non-head waiter queueing with AA check (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Disable spinning for trylock fallback (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Use trylock fallback when per-CPU rqnode is busy (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Perform AA checks immediately (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Enclose lock/unlock within lock entry acquisitions (Jerome Marchand) [RHEL-139985]
+- bpf: Remove runqslower tool (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Remove usage of lsm/file_alloc_security in selftest (Jerome Marchand) [RHEL-139985]
+- bpf: Disable file_alloc_security hook (Jerome Marchand) [RHEL-139985]
+- bpf: check for insn arrays in check_ptr_alignment (Jerome Marchand) [RHEL-139985]
+- bpf: force BPF_F_RDONLY_PROG on insn array creation (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Make CS length configurable for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add lock wait time stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Relax CPU requirements for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- bpf: Introduce internal bpf_map_check_op_flags helper function (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix some incorrect @param descriptions in the comment of libbpf.h (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Call bpf_get_numa_node_id() in trigger_count() (Jerome Marchand) [RHEL-139985]
+- docs: bpf: map_array: Specify BPF_MAP_TYPE_PERCPU_ARRAY value size limit (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix htab_update/reenter_update selftest failure (Jerome Marchand) [RHEL-139985]
+- bpf: implement "jmp" mode for trampoline (Jerome Marchand) [RHEL-139985]
+- bpf: specify the old and new poke_type for bpf_arch_text_poke (Jerome Marchand) [RHEL-139985]
+- bpf,x86: adjust the "jmp" mode for bpf trampoline (Jerome Marchand) [RHEL-139985]
+- bpf: fix the usage of BPF_TRAMP_F_SKIP_FRAME (Jerome Marchand) [RHEL-139985]
+- x86/ftrace: Implement DYNAMIC_FTRACE_WITH_JMP (Jerome Marchand) [RHEL-139985]
+- ftrace: Introduce FTRACE_OPS_FL_JMP (Jerome Marchand) [RHEL-139985]
+- bpf: cleanup aux->used_maps after jit (Jerome Marchand) [RHEL-139985]
+- selftests: bpf: Add tests for unbalanced rcu_read_lock (Jerome Marchand) [RHEL-139985]
+- bpf: support nested rcu critical sections (Jerome Marchand) [RHEL-139985]
+- bpf: test the correct stack liveness of tail calls (Jerome Marchand) [RHEL-139985]
+- bpf: correct stack liveness for tail calls (Jerome Marchand) [RHEL-139985]
+- bpf: test the proper verification of tail calls (Jerome Marchand) [RHEL-139985]
+- bpf: properly verify tail call behavior (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Jerome Marchand) [RHEL-139985]
+- bpf: Document cfi_stubs and owner fields in struct bpf_struct_ops (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names (Jerome Marchand) [RHEL-139985]
+- bpf: don't skip other information if xlated_prog_insns is skipped (Jerome Marchand) [RHEL-139985]
+- bpf: verifier: Move desc->imm setup to sort_kfunc_descs_by_imm_off() (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Align kfuncs renamed in bpf tree (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add BTF dedup tests for recursive typedef definitions (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix BTF dedup to support recursive typedef definitions (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix failure paths in send_signal test (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Convert glob_match() to bpf arena (Jerome Marchand) [RHEL-139985]
+- bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Jerome Marchand) [RHEL-139985]
+- bpf: Add missing checks to avoid verbose verifier log (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: retry bpf_map_update_elem() when E2BIG is returned (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add test to verify freeing the special fields in pcpu maps (Jerome Marchand) [RHEL-139985]
+- bpf: Free special fields when update [lru_,]percpu_hash maps (Jerome Marchand) [RHEL-139985]
+- bpf: Adjust return value for queue destruction in rqspinlock (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: add C-level selftests for indirect jumps (Jerome Marchand) [RHEL-139985]
+- libbpf: support llvm-generated indirect jumps (Jerome Marchand) [RHEL-139985]
+- bpf: disasm: add support for BPF_JMP|BPF_JA|BPF_X (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: test instructions arrays with blinding (Jerome Marchand) [RHEL-139985]
+- bpf: support instructions arrays with constants blinding (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: add selftests for new insn_array map (Jerome Marchand) [RHEL-139985]
+- libbpf: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
+- bpftool: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
+- bpf, x86: add new map type: instructions array (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Test parsing of (multi-)split BTF (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix parsing of multi-split BTF (Jerome Marchand) [RHEL-139985]
+- docs/bpf: Add missing BPF k/uprobe program types to docs (Jerome Marchand) [RHEL-139985]
+- libbpf: Update the comment to remove the reference to the deprecated interface bpf_program__load(). (Jerome Marchand) [RHEL-139985]
+- libbpf: Complete the missing @param and @return tags in btf.h (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add test for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
+- bpf: Skip bounds adjustment for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add ABBCCA case for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Disable queue destruction for deadlocks (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix intermittent failures in file_reader test (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix the incorrect reference to the memlock_rlim variable in the comment. (Jerome Marchand) [RHEL-139985]
+- libbpf: Optimize the redundant code in the bpf_object__init_user_btf_maps() function. (Jerome Marchand) [RHEL-139985]
+- bpf: Fix stackmap overflow check in __bpf_get_stackid() (Jerome Marchand) [RHEL-139985]
+- bpf: Refactor stack map trace depth calculation into helper function (Jerome Marchand) [RHEL-139985]
+- bpftool: Fix missing closing parethesis for BTF_KIND_UNKN (Jerome Marchand) [RHEL-139985]
+- selftests/bpf/benchs: Add overwrite mode benchmark for BPF ring buffer (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add overwrite mode test for BPF ring buffer (Jerome Marchand) [RHEL-139985]
+- bpf: Add overwrite mode for BPF ring buffer (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: add file dynptr tests (Jerome Marchand) [RHEL-139985]
+- bpf: dispatch to sleepable file dynptr (Jerome Marchand) [RHEL-139985]
+- bpf: verifier: refactor kfunc specialization (Jerome Marchand) [RHEL-139985]
+- bpf: add kfuncs and helpers support for file dynptrs (Jerome Marchand) [RHEL-139985]
+- bpf: add plumbing for file-backed dynptr (Jerome Marchand) [RHEL-139985]
+- bpf: verifier: centralize const dynptr check in unmark_stack_slots_dynptr() (Jerome Marchand) [RHEL-139985]
+- bpf: widen dynptr size/offset to 64 bit (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: remove unnecessary kfunc prototypes (Jerome Marchand) [RHEL-139985]
+- libbpf: fix formatting of bpf_object__append_subprog_code (Jerome Marchand) [RHEL-139985]
+- bpf: make bpf_insn_successors to return a pointer (Jerome Marchand) [RHEL-139985]
+- bpf: generalize and export map_get_next_key for arrays (Jerome Marchand) [RHEL-139985]
+- bpf: save the start of functions in bpf_prog_aux (Jerome Marchand) [RHEL-139985]
+- bpf: fix the return value of push_stack (Jerome Marchand) [RHEL-139985]
+- bpf: Clarify get_outer_instance() handling in propagate_to_outer_instance() (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix list_del() in arena list (Jerome Marchand) [RHEL-139985]
+- samples/bpf: Fix spelling typos in samples/bpf (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22 (Jerome Marchand) [RHEL-139985]
+- bpf: mark vma->{vm_mm,vm_file} as __safe_trusted_or_null (Jerome Marchand) [RHEL-139985]
+- bpf: mark mm->owner as __safe_rcu_or_null (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Silence unused-but-set build warnings (Jerome Marchand) [RHEL-139985]
+- bpf: Consistently use bpf_rcu_lock_held() everywhere (Jerome Marchand) [RHEL-139985]
+- bpf: Extract internal structs validation logic into helpers (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add more bpf_wq tests (Jerome Marchand) [RHEL-139985]
+- bpf: Fix handling maps with no BTF and non-constant offsets for the bpf_wq (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Test bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
+- bpf: add bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add tests for async cb context (Jerome Marchand) [RHEL-139985]
+- bpf: Refactor storage_get_func_atomic to generic non_sleepable flag (Jerome Marchand) [RHEL-139985]
+- bpf: Fix sleepable context for async callbacks (Jerome Marchand) [RHEL-139985]
+- bpf: Cleanup unused func args in rqspinlock implementation (Jerome Marchand) [RHEL-139985]
+- bpf: Add dynptr type for skb metadata (Jerome Marchand) [RHEL-139985]
+- cpufreq/amd-pstate: Add comment explaining nominal_perf usage for performance policy (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Add static asserts for EPP indices (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Fix some whitespace issues (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Adjust return values in amd_pstate_update_status() (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Make amd_pstate_get_mode_string() never return NULL (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Drop NULL value from amd_pstate_mode_string (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Use sysfs_match_string() for epp (Steve Best) [RHEL-127643]
+- efi/cper: Fix cper_bits_to_str buffer handling and return value (Thomas Huth) [RHEL-164371]
+- efi: Wipe INITRD config table from memory after consumption (Thomas Huth) [RHEL-164371]
+- efi/libstub: gop: Fix EDID support in mixed-mode (Thomas Huth) [RHEL-164371]
+- docs: efi: add CPER functions to driver-api (Thomas Huth) [RHEL-164371]
+- efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Thomas Huth) [RHEL-164371]
+- efi/cper: Add a new helper function to print bitmasks (Thomas Huth) [RHEL-164371]
+- efi/cper: Adjust infopfx size to accept an extra space (Thomas Huth) [RHEL-164371]
+- efi/libstub: x86: Store EDID in boot_params (Thomas Huth) [RHEL-164371]
+- efi/libstub: gop: Add support for reading EDID (Thomas Huth) [RHEL-164371]
+- efi/libstub: gop: Initialize screen_info in helper function (Thomas Huth) [RHEL-164371]
+- efi/libstub: gop: Find GOP handle instead of GOP data (Thomas Huth) [RHEL-164371]
+- efi: Fix trailing whitespace in header file (Thomas Huth) [RHEL-164371]
+- efi/memattr: Convert efi_memattr_init() return type to void (Thomas Huth) [RHEL-164371]
+- efi: stmm: fix kernel-doc "bad line" warnings (Thomas Huth) [RHEL-164371]
+- efi/riscv: Remove the useless failure return message print (Thomas Huth) [RHEL-164371]
+- efistub/x86: Add fallback for SMBIOS record lookup (Thomas Huth) [RHEL-164371]
+- kthread: Warn if mm_struct lacks user_ns in kthread_use_mm() (Thomas Huth) [RHEL-164371]
+- arm64/efi: Don't fail check current_in_efi() if preemptible (Thomas Huth) [RHEL-164371]
+- arm64: efi: Fix NULL pointer dereference by initializing user_ns (Thomas Huth) [RHEL-164371]
+- arm64/efi: Call EFI runtime services without disabling preemption (Thomas Huth) [RHEL-164371]
+- arm64/efi: Move uaccess en/disable out of efi_set_pgd() (Thomas Huth) [RHEL-164371]
+- arm64/efi: Drop efi_rt_lock spinlock from EFI arch wrapper (Thomas Huth) [RHEL-164371]
+- arm64/fpsimd: Permit kernel mode NEON with IRQs off (Thomas Huth) [RHEL-164371]
+- arm64/fpsimd: Don't warn when EFI execution context is preemptible (Thomas Huth) [RHEL-164371]
+- efi/runtime-wrappers: Keep track of the efi_runtime_lock owner (Thomas Huth) [RHEL-164371]
+- efi: Add missing static initializer for efi_mm::cpus_allowed_lock (Thomas Huth) [RHEL-164371]
+- efi/libstub: Fix page table access in 5-level to 4-level paging transition (Thomas Huth) [RHEL-164371]
+- platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Introduce new interface to export NPU metrics (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Refactor repetitive BIOS output handling (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Remove redundant ternary operators (Steve Best) [RHEL-127641]
+- hwmon: (k10temp) Add AMD Steam Deck APU ID (Steve Best) [RHEL-127650]
+- hwmon: (k10temp) Add device ID for Strix Halo (Steve Best) [RHEL-127650]
+Resolves: RHEL-117269, RHEL-127641, RHEL-127643, RHEL-127650, RHEL-139985, RHEL-164371, RHEL-171638
+
+* Mon May 18 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-229.el10]
+- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176448] {CVE-2026-46333}
+- mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174757] {CVE-2026-43303}
+- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171616] {CVE-2026-23375}
+- anon_inode: rework assertions (Rafael Aquini) [RHEL-171616]
+- vfs: use the new debug macros in inode_set_cached_link() (Rafael Aquini) [RHEL-171616]
+- vfs: catch invalid modes in may_open() (Rafael Aquini) [RHEL-171616]
+- vfs: add initial support for CONFIG_DEBUG_VFS (Rafael Aquini) [RHEL-171616]
+- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171616]
+- selftests/filesystems: add open() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
+- selftests/filesystems: add exec() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
+- selftests/filesystems: add chmod() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
+- selftests/filesystems: add chown() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
+- selftests: add file SLAB_TYPESAFE_BY_RCU recycling stressor (Rafael Aquini) [RHEL-171616]
+- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171616]
+- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171616]
+- anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171616]
+- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171616]
+- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171616]
+- coccinelle: kmalloc_obj: Remove default GFP_KERNEL arg (Michal Schmidt) [RHEL-174796]
+- default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (Michal Schmidt) [RHEL-174796]
+- add default_gfp() helper macro and use it in the new *alloc_obj() helpers (Michal Schmidt) [RHEL-174796]
+- coccinelle: Add kmalloc_objs conversion script (Michal Schmidt) [RHEL-174796]
+- slab.h: disable completely broken overflow handling in flex allocations (Michal Schmidt) [RHEL-174796]
+- slab: Introduce kmalloc_flex() and family (Michal Schmidt) [RHEL-174796]
+- compiler_types: Introduce __flex_counter() and family (Michal Schmidt) [RHEL-174796]
+- checkpatch: Suggest kmalloc_obj family for sizeof allocations (Michal Schmidt) [RHEL-174796]
+- slab: Introduce kmalloc_obj() and family (Michal Schmidt) [RHEL-174796]
+- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-172460]
+- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (David Marlin) [RHEL-172460 RHEL-172865] {CVE-2026-31772}
+- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-172460]
+- Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-172460]
+- Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-172460]
+- Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-172460]
+- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-172460]
+- Bluetooth: MGMT: validate LTK enc_size on load (David Marlin) [RHEL-172460 RHEL-172580] {CVE-2026-43020}
+- Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-172460]
+- Bluetooth: hci_event: move wake reason storage into validated event handlers (David Marlin) [RHEL-172460]
+- Bluetooth: SCO: fix race conditions in sco_sock_connect() (David Marlin) [RHEL-172460 RHEL-172607] {CVE-2026-43023}
+- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-172460]
+- Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-172460]
+- Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
+- Bluetooth: hci_aml: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
+- Bluetooth: hci_qca: Enable HFP hardware offload for WCN6855 and WCN7850 (David Marlin) [RHEL-172460]
+- Bluetooth: hci_qca: Refactor HFP hardware offload capability handling (David Marlin) [RHEL-172460]
+- Bluetooth: btusb: Remove duplicate entry for 0x13d3/0x3618 (David Marlin) [RHEL-172460]
+- Bluetooth: btintel: Remove unneeded CONFIG_PM* #ifdef's (David Marlin) [RHEL-172460]
+- Bluetooth: btnxpuart: Remove unneeded CONFIG_PM ifdef (David Marlin) [RHEL-172460]
+- Bluetooth: btintel_pcie: Remove unnecessary check before kfree_skb() (David Marlin) [RHEL-172460]
+- Bluetooth: btusb: Reject autosuspend if discovery is active (David Marlin) [RHEL-172460]
+- Bluetooth: hci_core: Export hci_discovery_active (David Marlin) [RHEL-172460]
+- Bluetooth: btusb: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
+- Bluetooth: Fix using PHYs bitfields as PHY value (David Marlin) [RHEL-172460]
+- Bluetooth: btqca: Add WCN6855 firmware priority selection feature (David Marlin) [RHEL-172460]
+- Bluetooth: btqca: move WCN7850 workaround to the caller (David Marlin) [RHEL-172460]
+- Bluetooth: btmtksdio: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
+- Bluetooth: hci_bcm4377: Use generic power management (David Marlin) [RHEL-172460]
+- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174522] {CVE-2026-43284}
+- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-170705]
+- iommu/arm-smmu-v3: Fix typos introduced by arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Do not continue in __arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Perform per-domain invalidations using arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Add arm_smmu_invs based arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Populate smmu_domain->invs when attaching masters (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Pre-allocate a per-master invalidation array (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Introduce a per-domain arm_smmu_invs array (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Add an inline arm_smmu_domain_free() (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Explicitly set smmu_domain->stage for SVA (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Jerry Snitselaar) [RHEL-88961]
+- sort.h: hoist cmp_int() into generic header file (Jerry Snitselaar) [RHEL-88961]
+- lib/sort.c: add _nonatomic() variants with cond_resched() (Jerry Snitselaar) [RHEL-88961]
+- lib/list_sort: clarify comparison function requirements in list_sort() (Jerry Snitselaar) [RHEL-88961]
+- lib/sort: clarify comparison function requirements in sort_r() (Jerry Snitselaar) [RHEL-88961]
+- cgroup/cpuset: Skip security check for hotplug induced v1 task migration (Waiman Long) [RHEL-160958]
+- cgroup/cpuset: Simplify setsched decision check in task iteration loop of cpuset_can_attach() (Waiman Long) [RHEL-160958]
+- blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-93825]
+Resolves: RHEL-160958, RHEL-170705, RHEL-171616, RHEL-172460, RHEL-172580, RHEL-172607, RHEL-172865, RHEL-174522, RHEL-174757, RHEL-174796, RHEL-176448, RHEL-88961, RHEL-93825
+
 * Thu May 14 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
 - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
 - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
--- a/kernel.spec
+++ b/kernel.spec
@ -179,15 +179,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 228.8
+%define pkgrelease 230.9
 %define kversion 6
-%define tarfile_release 6.12.0-228.8.el10nv
+%define tarfile_release 6.12.0-230.9.el10nv
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 228.8%{?buildid}%{?dist}
+%define specrelease 230.9%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-228.8.el10nv
+%define kabiversion 6.12.0-230.9.el10nv

 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@ -4543,6 +4543,10 @@ fi\
 #
 #
 %changelog
+* Tue May 19 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-230.9.el10nv]
+- Merge tag 'kernel-6.12.0-230.el10' into main-aie-nv (Jan Stancek) [VOYAGER-551]
+- ptrace: slightly saner 'get_dumpable()' logic (Jan Stancek) [VOYAGER-826] {CVE-2026-46333}
+
 * Fri May 15 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-228.8.el10nv]
 - Merge tag 'kernel-6.12.0-228.el10' into main-aie-nv (Jan Stancek) [VOYAGER-551]
 - NVIDIA: SAUCE: sched/fair: Add SIS_UTIL support to select_idle_capacity() (Phil Auld) [VOYAGER-732]
@ -4663,6 +4667,257 @@ fi\
 - redhat: build only for aarch64 64k and x86_64 variants (Jan Stancek)
 - redhat: set up initial Makefile.variables (Jan Stancek)

+* Tue May 19 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-230.el10]
+- powercap: intel_rapl: Add support for Nova Lake processors (Steve Best) [RHEL-117269]
+- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171638]
+- selftests/bpf: Ensure typedef are deduplicated in split BTF (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix deduplication of typedef with base definitions (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs (Jerome Marchand) [RHEL-139985]
+- bpf: Remove static qualifier from local subprog pointer (Jerome Marchand) [RHEL-139985]
+- bpf: Fix ld_{abs,ind} failure path analysis in subprogs (Jerome Marchand) [RHEL-139985]
+- bpf: Propagate error from visit_tailcall_insn (Jerome Marchand) [RHEL-139985]
+- ftrace,bpf: Remove FTRACE_OPS_FL_JMP ftrace_ops flag (Jerome Marchand) [RHEL-139985]
+- ftrace: Fix address for jmp mode in t_show() (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: add regression test for bpf_d_path() (Jerome Marchand) [RHEL-139985]
+- bpf: Fix verifier assumptions of bpf_d_path's output buffer (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add test for truncated dmabuf_iter reads (Jerome Marchand) [RHEL-139985]
+- bpf: Fix truncated dmabuf iterator reads (Jerome Marchand) [RHEL-139985]
+- x86/unwind/orc: Support reliable unwinding through BPF stack frames (Jerome Marchand) [RHEL-139985]
+- bpf: Add bpf_has_frame_pointer() (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix -Wdiscarded-qualifiers under C23 (Jerome Marchand) [RHEL-139985]
+- bpftool: Fix build warnings due to MS extensions (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add -fms-extensions to bpf build flags (Jerome Marchand) [RHEL-139985]
+- bpf: optimize bpf_map_update_elem() for map-in-map types (Jerome Marchand) [RHEL-139985]
+- bpf: make kprobe_multi_link_prog_run always_inline (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add success stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Precede non-head waiter queueing with AA check (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Disable spinning for trylock fallback (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Use trylock fallback when per-CPU rqnode is busy (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Perform AA checks immediately (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Enclose lock/unlock within lock entry acquisitions (Jerome Marchand) [RHEL-139985]
+- bpf: Remove runqslower tool (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Remove usage of lsm/file_alloc_security in selftest (Jerome Marchand) [RHEL-139985]
+- bpf: Disable file_alloc_security hook (Jerome Marchand) [RHEL-139985]
+- bpf: check for insn arrays in check_ptr_alignment (Jerome Marchand) [RHEL-139985]
+- bpf: force BPF_F_RDONLY_PROG on insn array creation (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Make CS length configurable for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add lock wait time stats to rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Relax CPU requirements for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- bpf: Introduce internal bpf_map_check_op_flags helper function (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix some incorrect @param descriptions in the comment of libbpf.h (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Call bpf_get_numa_node_id() in trigger_count() (Jerome Marchand) [RHEL-139985]
+- docs: bpf: map_array: Specify BPF_MAP_TYPE_PERCPU_ARRAY value size limit (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix htab_update/reenter_update selftest failure (Jerome Marchand) [RHEL-139985]
+- bpf: implement "jmp" mode for trampoline (Jerome Marchand) [RHEL-139985]
+- bpf: specify the old and new poke_type for bpf_arch_text_poke (Jerome Marchand) [RHEL-139985]
+- bpf,x86: adjust the "jmp" mode for bpf trampoline (Jerome Marchand) [RHEL-139985]
+- bpf: fix the usage of BPF_TRAMP_F_SKIP_FRAME (Jerome Marchand) [RHEL-139985]
+- x86/ftrace: Implement DYNAMIC_FTRACE_WITH_JMP (Jerome Marchand) [RHEL-139985]
+- ftrace: Introduce FTRACE_OPS_FL_JMP (Jerome Marchand) [RHEL-139985]
+- bpf: cleanup aux->used_maps after jit (Jerome Marchand) [RHEL-139985]
+- selftests: bpf: Add tests for unbalanced rcu_read_lock (Jerome Marchand) [RHEL-139985]
+- bpf: support nested rcu critical sections (Jerome Marchand) [RHEL-139985]
+- bpf: test the correct stack liveness of tail calls (Jerome Marchand) [RHEL-139985]
+- bpf: correct stack liveness for tail calls (Jerome Marchand) [RHEL-139985]
+- bpf: test the proper verification of tail calls (Jerome Marchand) [RHEL-139985]
+- bpf: properly verify tail call behavior (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Jerome Marchand) [RHEL-139985]
+- bpf: Document cfi_stubs and owner fields in struct bpf_struct_ops (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names (Jerome Marchand) [RHEL-139985]
+- bpf: don't skip other information if xlated_prog_insns is skipped (Jerome Marchand) [RHEL-139985]
+- bpf: verifier: Move desc->imm setup to sort_kfunc_descs_by_imm_off() (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Align kfuncs renamed in bpf tree (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add BTF dedup tests for recursive typedef definitions (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix BTF dedup to support recursive typedef definitions (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix failure paths in send_signal test (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Convert glob_match() to bpf arena (Jerome Marchand) [RHEL-139985]
+- bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Jerome Marchand) [RHEL-139985]
+- bpf: Add missing checks to avoid verbose verifier log (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: retry bpf_map_update_elem() when E2BIG is returned (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add test to verify freeing the special fields in pcpu maps (Jerome Marchand) [RHEL-139985]
+- bpf: Free special fields when update [lru_,]percpu_hash maps (Jerome Marchand) [RHEL-139985]
+- bpf: Adjust return value for queue destruction in rqspinlock (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: add C-level selftests for indirect jumps (Jerome Marchand) [RHEL-139985]
+- libbpf: support llvm-generated indirect jumps (Jerome Marchand) [RHEL-139985]
+- bpf: disasm: add support for BPF_JMP|BPF_JA|BPF_X (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: test instructions arrays with blinding (Jerome Marchand) [RHEL-139985]
+- bpf: support instructions arrays with constants blinding (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: add selftests for new insn_array map (Jerome Marchand) [RHEL-139985]
+- libbpf: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
+- bpftool: Recognize insn_array map type (Jerome Marchand) [RHEL-139985]
+- bpf, x86: add new map type: instructions array (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Test parsing of (multi-)split BTF (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix parsing of multi-split BTF (Jerome Marchand) [RHEL-139985]
+- docs/bpf: Add missing BPF k/uprobe program types to docs (Jerome Marchand) [RHEL-139985]
+- libbpf: Update the comment to remove the reference to the deprecated interface bpf_program__load(). (Jerome Marchand) [RHEL-139985]
+- libbpf: Complete the missing @param and @return tags in btf.h (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add test for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
+- bpf: Skip bounds adjustment for conditional jumps on same scalar register (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add ABBCCA case for rqspinlock stress test (Jerome Marchand) [RHEL-139985]
+- rqspinlock: Disable queue destruction for deadlocks (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix intermittent failures in file_reader test (Jerome Marchand) [RHEL-139985]
+- libbpf: Fix the incorrect reference to the memlock_rlim variable in the comment. (Jerome Marchand) [RHEL-139985]
+- libbpf: Optimize the redundant code in the bpf_object__init_user_btf_maps() function. (Jerome Marchand) [RHEL-139985]
+- bpf: Fix stackmap overflow check in __bpf_get_stackid() (Jerome Marchand) [RHEL-139985]
+- bpf: Refactor stack map trace depth calculation into helper function (Jerome Marchand) [RHEL-139985]
+- bpftool: Fix missing closing parethesis for BTF_KIND_UNKN (Jerome Marchand) [RHEL-139985]
+- selftests/bpf/benchs: Add overwrite mode benchmark for BPF ring buffer (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add overwrite mode test for BPF ring buffer (Jerome Marchand) [RHEL-139985]
+- bpf: Add overwrite mode for BPF ring buffer (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: add file dynptr tests (Jerome Marchand) [RHEL-139985]
+- bpf: dispatch to sleepable file dynptr (Jerome Marchand) [RHEL-139985]
+- bpf: verifier: refactor kfunc specialization (Jerome Marchand) [RHEL-139985]
+- bpf: add kfuncs and helpers support for file dynptrs (Jerome Marchand) [RHEL-139985]
+- bpf: add plumbing for file-backed dynptr (Jerome Marchand) [RHEL-139985]
+- bpf: verifier: centralize const dynptr check in unmark_stack_slots_dynptr() (Jerome Marchand) [RHEL-139985]
+- bpf: widen dynptr size/offset to 64 bit (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: remove unnecessary kfunc prototypes (Jerome Marchand) [RHEL-139985]
+- libbpf: fix formatting of bpf_object__append_subprog_code (Jerome Marchand) [RHEL-139985]
+- bpf: make bpf_insn_successors to return a pointer (Jerome Marchand) [RHEL-139985]
+- bpf: generalize and export map_get_next_key for arrays (Jerome Marchand) [RHEL-139985]
+- bpf: save the start of functions in bpf_prog_aux (Jerome Marchand) [RHEL-139985]
+- bpf: fix the return value of push_stack (Jerome Marchand) [RHEL-139985]
+- bpf: Clarify get_outer_instance() handling in propagate_to_outer_instance() (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix list_del() in arena list (Jerome Marchand) [RHEL-139985]
+- samples/bpf: Fix spelling typos in samples/bpf (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22 (Jerome Marchand) [RHEL-139985]
+- bpf: mark vma->{vm_mm,vm_file} as __safe_trusted_or_null (Jerome Marchand) [RHEL-139985]
+- bpf: mark mm->owner as __safe_rcu_or_null (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Silence unused-but-set build warnings (Jerome Marchand) [RHEL-139985]
+- bpf: Consistently use bpf_rcu_lock_held() everywhere (Jerome Marchand) [RHEL-139985]
+- bpf: Extract internal structs validation logic into helpers (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add more bpf_wq tests (Jerome Marchand) [RHEL-139985]
+- bpf: Fix handling maps with no BTF and non-constant offsets for the bpf_wq (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Test bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
+- bpf: add bpf_strcasestr,bpf_strncasestr kfuncs (Jerome Marchand) [RHEL-139985]
+- selftests/bpf: Add tests for async cb context (Jerome Marchand) [RHEL-139985]
+- bpf: Refactor storage_get_func_atomic to generic non_sleepable flag (Jerome Marchand) [RHEL-139985]
+- bpf: Fix sleepable context for async callbacks (Jerome Marchand) [RHEL-139985]
+- bpf: Cleanup unused func args in rqspinlock implementation (Jerome Marchand) [RHEL-139985]
+- bpf: Add dynptr type for skb metadata (Jerome Marchand) [RHEL-139985]
+- cpufreq/amd-pstate: Add comment explaining nominal_perf usage for performance policy (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Add static asserts for EPP indices (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Fix some whitespace issues (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Adjust return values in amd_pstate_update_status() (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Make amd_pstate_get_mode_string() never return NULL (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Drop NULL value from amd_pstate_mode_string (Steve Best) [RHEL-127643]
+- cpufreq/amd-pstate: Use sysfs_match_string() for epp (Steve Best) [RHEL-127643]
+- efi/cper: Fix cper_bits_to_str buffer handling and return value (Thomas Huth) [RHEL-164371]
+- efi: Wipe INITRD config table from memory after consumption (Thomas Huth) [RHEL-164371]
+- efi/libstub: gop: Fix EDID support in mixed-mode (Thomas Huth) [RHEL-164371]
+- docs: efi: add CPER functions to driver-api (Thomas Huth) [RHEL-164371]
+- efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Thomas Huth) [RHEL-164371]
+- efi/cper: Add a new helper function to print bitmasks (Thomas Huth) [RHEL-164371]
+- efi/cper: Adjust infopfx size to accept an extra space (Thomas Huth) [RHEL-164371]
+- efi/libstub: x86: Store EDID in boot_params (Thomas Huth) [RHEL-164371]
+- efi/libstub: gop: Add support for reading EDID (Thomas Huth) [RHEL-164371]
+- efi/libstub: gop: Initialize screen_info in helper function (Thomas Huth) [RHEL-164371]
+- efi/libstub: gop: Find GOP handle instead of GOP data (Thomas Huth) [RHEL-164371]
+- efi: Fix trailing whitespace in header file (Thomas Huth) [RHEL-164371]
+- efi/memattr: Convert efi_memattr_init() return type to void (Thomas Huth) [RHEL-164371]
+- efi: stmm: fix kernel-doc "bad line" warnings (Thomas Huth) [RHEL-164371]
+- efi/riscv: Remove the useless failure return message print (Thomas Huth) [RHEL-164371]
+- efistub/x86: Add fallback for SMBIOS record lookup (Thomas Huth) [RHEL-164371]
+- kthread: Warn if mm_struct lacks user_ns in kthread_use_mm() (Thomas Huth) [RHEL-164371]
+- arm64/efi: Don't fail check current_in_efi() if preemptible (Thomas Huth) [RHEL-164371]
+- arm64: efi: Fix NULL pointer dereference by initializing user_ns (Thomas Huth) [RHEL-164371]
+- arm64/efi: Call EFI runtime services without disabling preemption (Thomas Huth) [RHEL-164371]
+- arm64/efi: Move uaccess en/disable out of efi_set_pgd() (Thomas Huth) [RHEL-164371]
+- arm64/efi: Drop efi_rt_lock spinlock from EFI arch wrapper (Thomas Huth) [RHEL-164371]
+- arm64/fpsimd: Permit kernel mode NEON with IRQs off (Thomas Huth) [RHEL-164371]
+- arm64/fpsimd: Don't warn when EFI execution context is preemptible (Thomas Huth) [RHEL-164371]
+- efi/runtime-wrappers: Keep track of the efi_runtime_lock owner (Thomas Huth) [RHEL-164371]
+- efi: Add missing static initializer for efi_mm::cpus_allowed_lock (Thomas Huth) [RHEL-164371]
+- efi/libstub: Fix page table access in 5-level to 4-level paging transition (Thomas Huth) [RHEL-164371]
+- platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Introduce new interface to export NPU metrics (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Refactor repetitive BIOS output handling (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (Steve Best) [RHEL-127641]
+- platform/x86/amd/pmf: Remove redundant ternary operators (Steve Best) [RHEL-127641]
+- hwmon: (k10temp) Add AMD Steam Deck APU ID (Steve Best) [RHEL-127650]
+- hwmon: (k10temp) Add device ID for Strix Halo (Steve Best) [RHEL-127650]
+
+* Mon May 18 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-229.el10]
+- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176448] {CVE-2026-46333}
+- mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174757] {CVE-2026-43303}
+- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171616] {CVE-2026-23375}
+- anon_inode: rework assertions (Rafael Aquini) [RHEL-171616]
+- vfs: use the new debug macros in inode_set_cached_link() (Rafael Aquini) [RHEL-171616]
+- vfs: catch invalid modes in may_open() (Rafael Aquini) [RHEL-171616]
+- vfs: add initial support for CONFIG_DEBUG_VFS (Rafael Aquini) [RHEL-171616]
+- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171616]
+- selftests/filesystems: add open() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
+- selftests/filesystems: add exec() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
+- selftests/filesystems: add chmod() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
+- selftests/filesystems: add chown() test for anonymous inodes (Rafael Aquini) [RHEL-171616]
+- selftests: add file SLAB_TYPESAFE_BY_RCU recycling stressor (Rafael Aquini) [RHEL-171616]
+- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171616]
+- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171616]
+- anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171616]
+- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171616]
+- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171616]
+- coccinelle: kmalloc_obj: Remove default GFP_KERNEL arg (Michal Schmidt) [RHEL-174796]
+- default_gfp(): avoid using the "newfangled" __VA_OPT__ trick (Michal Schmidt) [RHEL-174796]
+- add default_gfp() helper macro and use it in the new *alloc_obj() helpers (Michal Schmidt) [RHEL-174796]
+- coccinelle: Add kmalloc_objs conversion script (Michal Schmidt) [RHEL-174796]
+- slab.h: disable completely broken overflow handling in flex allocations (Michal Schmidt) [RHEL-174796]
+- slab: Introduce kmalloc_flex() and family (Michal Schmidt) [RHEL-174796]
+- compiler_types: Introduce __flex_counter() and family (Michal Schmidt) [RHEL-174796]
+- checkpatch: Suggest kmalloc_obj family for sizeof allocations (Michal Schmidt) [RHEL-174796]
+- slab: Introduce kmalloc_obj() and family (Michal Schmidt) [RHEL-174796]
+- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (David Marlin) [RHEL-172460]
+- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (David Marlin) [RHEL-172460 RHEL-172865] {CVE-2026-31772}
+- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (David Marlin) [RHEL-172460]
+- Bluetooth: SMP: force responder MITM requirements before building the pairing response (David Marlin) [RHEL-172460]
+- Bluetooth: MGMT: validate mesh send advertising payload length (David Marlin) [RHEL-172460]
+- Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt (David Marlin) [RHEL-172460]
+- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (David Marlin) [RHEL-172460]
+- Bluetooth: MGMT: validate LTK enc_size on load (David Marlin) [RHEL-172460 RHEL-172580] {CVE-2026-43020}
+- Bluetooth: hci_h4: Fix race during initialization (David Marlin) [RHEL-172460]
+- Bluetooth: hci_event: move wake reason storage into validated event handlers (David Marlin) [RHEL-172460]
+- Bluetooth: SCO: fix race conditions in sco_sock_connect() (David Marlin) [RHEL-172460 RHEL-172607] {CVE-2026-43023}
+- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate (David Marlin) [RHEL-172460]
+- Bluetooth: hci_sync: annotate data-races around hdev->req_status (David Marlin) [RHEL-172460]
+- Bluetooth: hci_qca: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
+- Bluetooth: hci_aml: Migrate to serdev specific shutdown function (David Marlin) [RHEL-172460]
+- Bluetooth: hci_qca: Enable HFP hardware offload for WCN6855 and WCN7850 (David Marlin) [RHEL-172460]
+- Bluetooth: hci_qca: Refactor HFP hardware offload capability handling (David Marlin) [RHEL-172460]
+- Bluetooth: btusb: Remove duplicate entry for 0x13d3/0x3618 (David Marlin) [RHEL-172460]
+- Bluetooth: btintel: Remove unneeded CONFIG_PM* #ifdef's (David Marlin) [RHEL-172460]
+- Bluetooth: btnxpuart: Remove unneeded CONFIG_PM ifdef (David Marlin) [RHEL-172460]
+- Bluetooth: btintel_pcie: Remove unnecessary check before kfree_skb() (David Marlin) [RHEL-172460]
+- Bluetooth: btusb: Reject autosuspend if discovery is active (David Marlin) [RHEL-172460]
+- Bluetooth: hci_core: Export hci_discovery_active (David Marlin) [RHEL-172460]
+- Bluetooth: btusb: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
+- Bluetooth: Fix using PHYs bitfields as PHY value (David Marlin) [RHEL-172460]
+- Bluetooth: btqca: Add WCN6855 firmware priority selection feature (David Marlin) [RHEL-172460]
+- Bluetooth: btqca: move WCN7850 workaround to the caller (David Marlin) [RHEL-172460]
+- Bluetooth: btmtksdio: Use pm_ptr instead of #ifdef CONFIG_PM (David Marlin) [RHEL-172460]
+- Bluetooth: hci_bcm4377: Use generic power management (David Marlin) [RHEL-172460]
+- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174522] {CVE-2026-43284}
+- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-170705]
+- iommu/arm-smmu-v3: Fix typos introduced by arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Do not continue in __arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Perform per-domain invalidations using arm_smmu_invs (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Add arm_smmu_invs based arm_smmu_domain_inv_range() (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Populate smmu_domain->invs when attaching masters (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Pre-allocate a per-master invalidation array (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Introduce a per-domain arm_smmu_invs array (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Add an inline arm_smmu_domain_free() (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Explicitly set smmu_domain->stage for SVA (Jerry Snitselaar) [RHEL-88961]
+- iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update (Jerry Snitselaar) [RHEL-88961]
+- sort.h: hoist cmp_int() into generic header file (Jerry Snitselaar) [RHEL-88961]
+- lib/sort.c: add _nonatomic() variants with cond_resched() (Jerry Snitselaar) [RHEL-88961]
+- lib/list_sort: clarify comparison function requirements in list_sort() (Jerry Snitselaar) [RHEL-88961]
+- lib/sort: clarify comparison function requirements in sort_r() (Jerry Snitselaar) [RHEL-88961]
+- cgroup/cpuset: Skip security check for hotplug induced v1 task migration (Waiman Long) [RHEL-160958]
+- cgroup/cpuset: Simplify setsched decision check in task iteration loop of cpuset_can_attach() (Waiman Long) [RHEL-160958]
+- blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-93825]
+
 * Thu May 14 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-228.el10]
 - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
 - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174253] {CVE-2026-43205}
--- a/6
+++ b/6
@ -1,3 +1,3 @@
-SHA512 (linux-6.12.0-228.8.el10nv.tar.xz) = ea031a1a95aa8c1391ce3d5a283484670b134bd221ff83bea06c694df3e94e68398d0a226653c3e58e8f4810ab8178b03fb9faa1f8bd195c74c99bf9db40d570
-SHA512 (kernel-abi-stablelists-6.12.0-228.8.el10nv.tar.xz) = c19fff9630ddaf5e0b62a17a83cc41c4d3289f5b70daef74fabd7fb8dece0c1469acacecf31624eabaf5dfc8b6bd681aacf831e4e1a1360fe67cb7081564c1c9
-SHA512 (kernel-kabi-dw-6.12.0-228.8.el10nv.tar.xz) = df141c723e6e6b47709ec3462337a824f45b4835e31a6af774e820f597d65ffb1901774600fd524e796b0e1bbca1393646aad8be41ff2f5d6dea168ec2a9c2d0
+SHA512 (linux-6.12.0-230.9.el10nv.tar.xz) = a4e548b2c24a4d506ad856f9600abc1a049f9c0da4aa1b0e54c14cecb5555df533ca2a8bb57c50e96b6786e7861379a77ac53cd92775bb41a6f57963714e6dfc
+SHA512 (kernel-abi-stablelists-6.12.0-230.9.el10nv.tar.xz) = 1dbddbef01a82c284f579cbd23dfb30d63660f13954c6aaafe26dbe7f66c69474d691fecb1fb5ab057ab5c16359eb6dff42c2d20df6dc7d49366fcd933994b41
+SHA512 (kernel-kabi-dw-6.12.0-230.9.el10nv.tar.xz) = 71765737f607a5d4ec60c7058952f4c620da60d2184dd5de43da9712705bb7a6b33d82437e1e46352f03faad6061e55a3fee3c5ffc3350c7eabf71bc9c831c79