diff --git a/Makefile.rhelver b/Makefile.rhelver
index 1237b6f4e..b79c3a98a 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 7
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 583
+RHEL_RELEASE = 584
 
 #
 # ZSTREAM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index a910c512b..2c12e3504 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -362,7 +362,9 @@ CONFIG_ARM_SMCCC_SOC_ID=y
 # CONFIG_ARM_SMC_WATCHDOG is not set
 # CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT is not set
 # CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
+CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
 # CONFIG_ARM_SMMU_QCOM_DEBUG is not set
+CONFIG_ARM_SMMU_V3_IOMMUFD=y
 CONFIG_ARM_SMMU_V3_KUNIT_TEST=m
 CONFIG_ARM_SMMU_V3_PMU=m
 CONFIG_ARM_SMMU_V3_SVA=y
@@ -1330,7 +1332,6 @@ CONFIG_DEVTMPFS=y
 CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 # CONFIG_DLM is not set
-CONFIG_DMA_API_DEBUG_SG=y
 CONFIG_DMA_API_DEBUG=y
 CONFIG_DMABUF_DEBUG=y
 # CONFIG_DMABUF_HEAPS_CMA is not set
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index c1ab336c2..95adcfdcd 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -362,7 +362,9 @@ CONFIG_ARM_SMCCC_SOC_ID=y
 # CONFIG_ARM_SMC_WATCHDOG is not set
 # CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT is not set
 # CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
+CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
 # CONFIG_ARM_SMMU_QCOM_DEBUG is not set
+CONFIG_ARM_SMMU_V3_IOMMUFD=y
 CONFIG_ARM_SMMU_V3_KUNIT_TEST=m
 CONFIG_ARM_SMMU_V3_PMU=m
 CONFIG_ARM_SMMU_V3_SVA=y
@@ -1323,7 +1325,6 @@ CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 # CONFIG_DLM is not set
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 30721fbe8..c666dde84 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -360,7 +360,9 @@ CONFIG_ARM_SMCCC_SOC_ID=y
 # CONFIG_ARM_SMC_WATCHDOG is not set
 # CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT is not set
 # CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
+CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
 # CONFIG_ARM_SMMU_QCOM_DEBUG is not set
+CONFIG_ARM_SMMU_V3_IOMMUFD=y
 CONFIG_ARM_SMMU_V3_KUNIT_TEST=m
 CONFIG_ARM_SMMU_V3_PMU=m
 CONFIG_ARM_SMMU_V3_SVA=y
@@ -1328,7 +1330,6 @@ CONFIG_DEVTMPFS=y
 CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 # CONFIG_DLM is not set
-CONFIG_DMA_API_DEBUG_SG=y
 CONFIG_DMA_API_DEBUG=y
 CONFIG_DMABUF_DEBUG=y
 # CONFIG_DMABUF_HEAPS_CMA is not set
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index dbd948de0..05af4d09c 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -360,7 +360,9 @@ CONFIG_ARM_SMCCC_SOC_ID=y
 # CONFIG_ARM_SMC_WATCHDOG is not set
 # CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT is not set
 # CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
+CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
 # CONFIG_ARM_SMMU_QCOM_DEBUG is not set
+CONFIG_ARM_SMMU_V3_IOMMUFD=y
 CONFIG_ARM_SMMU_V3_KUNIT_TEST=m
 CONFIG_ARM_SMMU_V3_PMU=m
 CONFIG_ARM_SMMU_V3_SVA=y
@@ -1321,7 +1323,6 @@ CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 # CONFIG_DLM is not set
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 0f711bc86..9a57a4b3e 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -367,7 +367,9 @@ CONFIG_ARM_SMCCC_SOC_ID=y
 # CONFIG_ARM_SMC_WATCHDOG is not set
 # CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT is not set
 # CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
+CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
 # CONFIG_ARM_SMMU_QCOM_DEBUG is not set
+CONFIG_ARM_SMMU_V3_IOMMUFD=y
 CONFIG_ARM_SMMU_V3_KUNIT_TEST=m
 CONFIG_ARM_SMMU_V3_PMU=m
 CONFIG_ARM_SMMU_V3_SVA=y
@@ -1347,7 +1349,6 @@ CONFIG_DEVTMPFS=y
 CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 # CONFIG_DLM is not set
-CONFIG_DMA_API_DEBUG_SG=y
 CONFIG_DMA_API_DEBUG=y
 CONFIG_DMABUF_DEBUG=y
 # CONFIG_DMABUF_HEAPS_CMA is not set
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index 3eb00e533..35078f5c3 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -367,7 +367,9 @@ CONFIG_ARM_SMCCC_SOC_ID=y
 # CONFIG_ARM_SMC_WATCHDOG is not set
 # CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT is not set
 # CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
+CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
 # CONFIG_ARM_SMMU_QCOM_DEBUG is not set
+CONFIG_ARM_SMMU_V3_IOMMUFD=y
 CONFIG_ARM_SMMU_V3_KUNIT_TEST=m
 CONFIG_ARM_SMMU_V3_PMU=m
 CONFIG_ARM_SMMU_V3_SVA=y
@@ -1340,7 +1342,6 @@ CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 # CONFIG_DLM is not set
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 8c95e3571..d0ec511c8 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -365,7 +365,9 @@ CONFIG_ARM_SMCCC_SOC_ID=y
 # CONFIG_ARM_SMC_WATCHDOG is not set
 # CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT is not set
 # CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
+CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
 # CONFIG_ARM_SMMU_QCOM_DEBUG is not set
+CONFIG_ARM_SMMU_V3_IOMMUFD=y
 CONFIG_ARM_SMMU_V3_KUNIT_TEST=m
 CONFIG_ARM_SMMU_V3_PMU=m
 CONFIG_ARM_SMMU_V3_SVA=y
@@ -1345,7 +1347,6 @@ CONFIG_DEVTMPFS=y
 CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 # CONFIG_DLM is not set
-CONFIG_DMA_API_DEBUG_SG=y
 CONFIG_DMA_API_DEBUG=y
 CONFIG_DMABUF_DEBUG=y
 # CONFIG_DMABUF_HEAPS_CMA is not set
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index fb834c48b..0310bc2cc 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -365,7 +365,9 @@ CONFIG_ARM_SMCCC_SOC_ID=y
 # CONFIG_ARM_SMC_WATCHDOG is not set
 # CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT is not set
 # CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
+CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
 # CONFIG_ARM_SMMU_QCOM_DEBUG is not set
+CONFIG_ARM_SMMU_V3_IOMMUFD=y
 CONFIG_ARM_SMMU_V3_KUNIT_TEST=m
 CONFIG_ARM_SMMU_V3_PMU=m
 CONFIG_ARM_SMMU_V3_SVA=y
@@ -1338,7 +1340,6 @@ CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 # CONFIG_DLM is not set
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index cd703faaf..120bba547 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -1101,7 +1101,6 @@ CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
-CONFIG_DMA_API_DEBUG_SG=y
 CONFIG_DMA_API_DEBUG=y
 CONFIG_DMABUF_DEBUG=y
 # CONFIG_DMABUF_HEAPS_CMA is not set
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 0da789260..95a9ac318 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -1094,7 +1094,6 @@ CONFIG_DIMLIB=y
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index d2c9469f2..bfd9ab3a2 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -1105,7 +1105,6 @@ CONFIG_DIMLIB=y
 # CONFIG_DLHL60D is not set
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
-CONFIG_DMA_API_DEBUG_SG=y
 CONFIG_DMA_API_DEBUG=y
 CONFIG_DMABUF_DEBUG=y
 # CONFIG_DMABUF_HEAPS_CMA is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 67edb773a..39252b3df 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -1098,7 +1098,6 @@ CONFIG_DIMLIB=y
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index b360df076..bba5583bb 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -1103,7 +1103,6 @@ CONFIG_DIMLIB=y
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 0f12ea3b2..f6f1a3cd9 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -1169,7 +1169,6 @@ CONFIG_DL2K=m
 # CONFIG_DLHL60D is not set
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
-CONFIG_DMA_API_DEBUG_SG=y
 CONFIG_DMA_API_DEBUG=y
 CONFIG_DMABUF_DEBUG=y
 # CONFIG_DMABUF_HEAPS_CMA is not set
@@ -3318,15 +3317,25 @@ CONFIG_MISC_RTSX_PCI=m
 CONFIG_MISC_RTSX_USB=m
 CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
 # CONFIG_MITIGATION_GDS_FORCE is not set
+CONFIG_MITIGATION_GDS=y
 CONFIG_MITIGATION_IBPB_ENTRY=y
 CONFIG_MITIGATION_IBRS_ENTRY=y
+CONFIG_MITIGATION_L1TF=y
+CONFIG_MITIGATION_MDS=y
+CONFIG_MITIGATION_MMIO_STALE_DATA=y
 CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y
+CONFIG_MITIGATION_RETBLEED=y
 CONFIG_MITIGATION_RETHUNK=y
 CONFIG_MITIGATION_RETPOLINE=y
 CONFIG_MITIGATION_RFDS=y
 CONFIG_MITIGATION_SLS=y
 CONFIG_MITIGATION_SPECTRE_BHI=y
+CONFIG_MITIGATION_SPECTRE_V1=y
+CONFIG_MITIGATION_SPECTRE_V2=y
+CONFIG_MITIGATION_SRBDS=y
 CONFIG_MITIGATION_SRSO=y
+CONFIG_MITIGATION_SSB=y
+CONFIG_MITIGATION_TAA=y
 CONFIG_MITIGATION_UNRET_ENTRY=y
 # CONFIG_MK8 is not set
 # CONFIG_MLX4_CORE_GEN2 is not set
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index f687a74e7..3db0eb3fa 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -1162,7 +1162,6 @@ CONFIG_DL2K=m
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
@@ -3298,15 +3297,25 @@ CONFIG_MISC_RTSX_PCI=m
 CONFIG_MISC_RTSX_USB=m
 CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
 # CONFIG_MITIGATION_GDS_FORCE is not set
+CONFIG_MITIGATION_GDS=y
 CONFIG_MITIGATION_IBPB_ENTRY=y
 CONFIG_MITIGATION_IBRS_ENTRY=y
+CONFIG_MITIGATION_L1TF=y
+CONFIG_MITIGATION_MDS=y
+CONFIG_MITIGATION_MMIO_STALE_DATA=y
 CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y
+CONFIG_MITIGATION_RETBLEED=y
 CONFIG_MITIGATION_RETHUNK=y
 CONFIG_MITIGATION_RETPOLINE=y
 CONFIG_MITIGATION_RFDS=y
 CONFIG_MITIGATION_SLS=y
 CONFIG_MITIGATION_SPECTRE_BHI=y
+CONFIG_MITIGATION_SPECTRE_V1=y
+CONFIG_MITIGATION_SPECTRE_V2=y
+CONFIG_MITIGATION_SRBDS=y
 CONFIG_MITIGATION_SRSO=y
+CONFIG_MITIGATION_SSB=y
+CONFIG_MITIGATION_TAA=y
 CONFIG_MITIGATION_UNRET_ENTRY=y
 # CONFIG_MK8 is not set
 # CONFIG_MLX4_CORE_GEN2 is not set
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index d4efc0f7a..88b239512 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -1188,7 +1188,6 @@ CONFIG_DL2K=m
 # CONFIG_DLHL60D is not set
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
-CONFIG_DMA_API_DEBUG_SG=y
 CONFIG_DMA_API_DEBUG=y
 CONFIG_DMABUF_DEBUG=y
 # CONFIG_DMABUF_HEAPS_CMA is not set
@@ -3376,15 +3375,25 @@ CONFIG_MISC_RTSX_PCI=m
 CONFIG_MISC_RTSX_USB=m
 CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
 # CONFIG_MITIGATION_GDS_FORCE is not set
+CONFIG_MITIGATION_GDS=y
 CONFIG_MITIGATION_IBPB_ENTRY=y
 CONFIG_MITIGATION_IBRS_ENTRY=y
+CONFIG_MITIGATION_L1TF=y
+CONFIG_MITIGATION_MDS=y
+CONFIG_MITIGATION_MMIO_STALE_DATA=y
 CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y
+CONFIG_MITIGATION_RETBLEED=y
 CONFIG_MITIGATION_RETHUNK=y
 CONFIG_MITIGATION_RETPOLINE=y
 CONFIG_MITIGATION_RFDS=y
 CONFIG_MITIGATION_SLS=y
 CONFIG_MITIGATION_SPECTRE_BHI=y
+CONFIG_MITIGATION_SPECTRE_V1=y
+CONFIG_MITIGATION_SPECTRE_V2=y
+CONFIG_MITIGATION_SRBDS=y
 CONFIG_MITIGATION_SRSO=y
+CONFIG_MITIGATION_SSB=y
+CONFIG_MITIGATION_TAA=y
 CONFIG_MITIGATION_UNRET_ENTRY=y
 # CONFIG_MK8 is not set
 # CONFIG_MLX4_CORE_GEN2 is not set
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 99a29777b..1d622636c 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -1181,7 +1181,6 @@ CONFIG_DL2K=m
 CONFIG_DLM_DEBUG=y
 CONFIG_DLM=m
 # CONFIG_DMA_API_DEBUG is not set
-# CONFIG_DMA_API_DEBUG_SG is not set
 # CONFIG_DMABUF_DEBUG is not set
 # CONFIG_DMABUF_HEAPS_CMA is not set
 CONFIG_DMABUF_HEAPS_SYSTEM=y
@@ -3356,15 +3355,25 @@ CONFIG_MISC_RTSX_PCI=m
 CONFIG_MISC_RTSX_USB=m
 CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
 # CONFIG_MITIGATION_GDS_FORCE is not set
+CONFIG_MITIGATION_GDS=y
 CONFIG_MITIGATION_IBPB_ENTRY=y
 CONFIG_MITIGATION_IBRS_ENTRY=y
+CONFIG_MITIGATION_L1TF=y
+CONFIG_MITIGATION_MDS=y
+CONFIG_MITIGATION_MMIO_STALE_DATA=y
 CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y
+CONFIG_MITIGATION_RETBLEED=y
 CONFIG_MITIGATION_RETHUNK=y
 CONFIG_MITIGATION_RETPOLINE=y
 CONFIG_MITIGATION_RFDS=y
 CONFIG_MITIGATION_SLS=y
 CONFIG_MITIGATION_SPECTRE_BHI=y
+CONFIG_MITIGATION_SPECTRE_V1=y
+CONFIG_MITIGATION_SPECTRE_V2=y
+CONFIG_MITIGATION_SRBDS=y
 CONFIG_MITIGATION_SRSO=y
+CONFIG_MITIGATION_SSB=y
+CONFIG_MITIGATION_TAA=y
 CONFIG_MITIGATION_UNRET_ENTRY=y
 # CONFIG_MK8 is not set
 # CONFIG_MLX4_CORE_GEN2 is not set
diff --git a/kernel.changelog b/kernel.changelog
index 31d2b1521..ba689d1e9 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,333 @@
+* Fri May 09 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-584.el9]
+- net: warn if NAPI instance wasn't shut down (Davide Caratti) [RHEL-77816]
+- net: hide the definition of dev_get_by_napi_id() (Davide Caratti) [RHEL-77816]
+- net: page_pool: don't try to stash the napi id (Davide Caratti) [RHEL-77816]
+- xsk: Bring back busy polling support (Davide Caratti) [RHEL-77816]
+- net: Make napi_hash_lock irq safe (Davide Caratti) [RHEL-77816]
+- netdev: prevent accessing NAPI instances from another namespace (Davide Caratti) [RHEL-77816] {CVE-2025-21659}
+- netdev-genl: Hold rcu_read_lock in napi_set (Davide Caratti) [RHEL-77816]
+- mlx4: Add support for persistent NAPI config to RX CQs (Davide Caratti) [RHEL-77816]
+- mlx5: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
+- bnxt: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
+- netdev-genl: Support setting per-NAPI config values (Davide Caratti) [RHEL-77816]
+- net: napi: Add napi_config (Davide Caratti) [RHEL-77816]
+- netdev-genl: Dump gro_flush_timeout (Davide Caratti) [RHEL-77816]
+- net: napi: Make gro_flush_timeout per-NAPI (Davide Caratti) [RHEL-77816]
+- netdev-genl: Dump napi_defer_hard_irqs (Davide Caratti) [RHEL-77816]
+- net: napi: Make napi_defer_hard_irqs per-NAPI (Davide Caratti) [RHEL-77816]
+- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-88224]
+- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-88224]
+- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-88224]
+- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-88224]
+- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Waiman Long) [RHEL-88224]
+- x86/bugs: Skip RSB fill at VMEXIT (Waiman Long) [RHEL-88224]
+- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Waiman Long) [RHEL-88224]
+- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Waiman Long) [RHEL-88224]
+- x86/bugs: Fix handling when SRSO mitigation is disabled (Waiman Long) [RHEL-88224]
+- x86/bugs: Add missing NO_SSB flag (Waiman Long) [RHEL-88224]
+- Documentation/srso: Document a method for checking safe RET operates properly (Waiman Long) [RHEL-88224]
+- redhat/configs: Add new CONFIG_MITIGATION_* kconfig files (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for GDS (Waiman Long) [RHEL-88224]
+- x86/bugs: Remove GDS Force Kconfig option (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for SSB (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for Spectre V2 (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for SRBDS (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for Spectre v1 (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for RETBLEED (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for L1TF (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for MMIO Stable Data (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for TAA (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for MDS (Waiman Long) [RHEL-88224]
+- x86/cpufeatures: Flip the /proc/cpuinfo appearance logic (Waiman Long) [RHEL-88224]
+- x86/bugs: Add 'spectre_bhi=vmexit' cmdline option (Waiman Long) [RHEL-88224]
+- x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
+- x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
+- x86/cpu: Use EXPORT_PER_CPU_SYMBOL_GPL() for x86_spec_ctrl_current (Waiman Long) [RHEL-88224]
+- linux/dim: Fix divide by 0 in RDMA DIM (CKI Backport Bot) [RHEL-80826] {CVE-2022-49670}
+- scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil) [RHEL-80700]
+- scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [RHEL-80700]
+- scsi: megaraid_sas: Make most module parameters static (Chandrakanth Patil) [RHEL-80700]
+- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-88421]
+- ibmvnic: Don't reference skb after sending to VIOS (Mamatha Inamdar) [RHEL-83359] {CVE-2025-21855}
+- netfilter: nft_tunnel: fix geneve_opt type confusion addition (CKI Backport Bot) [RHEL-88783] {CVE-2025-22056}
+- iommu/amd: Fix header file (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Fix possible circular locking dependency (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add the document for Intel IOMMU debugfs (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Jerry Snitselaar) [RHEL-78704]
+- drm/tegra: Fix NULL vs IS_ERR() check in probe() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Jerry Snitselaar) [RHEL-78704]
+- iommu: Fix a spelling error (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Jerry Snitselaar) [RHEL-78704]
+- iommu: Fix potential memory leak in iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-78704]
+- iommu/hyper-v: Don't assume cpu_possible_mask is dense (Jerry Snitselaar) [RHEL-78704]
+- iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Jerry Snitselaar) [RHEL-78705]
+- iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Jerry Snitselaar) [RHEL-78708]
+- iommufd/selftest: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78708]
+- iommu/amd: Fully decode all combinations of alloc_paging_flags (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Move the nid to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove dev == NULL checks (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove unused amd_iommu_domain_update() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: remove return value of amd_iommu_detect (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove amd_iommu_apply_erratum_63() (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Modify clear_dte_entry() to avoid in-place update (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Introduce helper function get_dte256() (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Introduce helper function to update 256-bit DTE (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Misc ACPI IVRS debug info clean up (Jerry Snitselaar) [RHEL-75906]
+- iommu/vt-d: Link cache tags of same iommu unit together (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove iommu cap audit (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Jerry Snitselaar) [RHEL-78704]
+- iommu: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-78704]
+- lib/string_choices: Add some comments to make more clear for string choices helpers. (Jerry Snitselaar) [RHEL-78705]
+- lib/string_choices: Introduce several opposite string choice helpers (Jerry Snitselaar) [RHEL-78705]
+- lib/string_choices: Add str_true_false()/str_false_true() helper (Jerry Snitselaar) [RHEL-78705]
+- string_choices: Add wrapper for str_down_up() (Jerry Snitselaar) [RHEL-78705]
+- lib/string_choices: Add str_up_down() helper (Jerry Snitselaar) [RHEL-78705]
+- iommu: Remove the remove_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78705]
+- iommu: Detaching pasid by attaching to the blocked_domain (Jerry Snitselaar) [RHEL-78704]
+- iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Jerry Snitselaar) [RHEL-78704]
+- iommu: Prevent pasid attach if no ops->remove_dev_pasid (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Add way to debug pgtable walk (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Make pgtable walker more generic (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Add support for PRR bit setup (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Jerry Snitselaar) [RHEL-78705]
+- redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Re-enable context caching in smmu reset operation (Jerry Snitselaar) [RHEL-78705]
+- iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Jerry Snitselaar) [RHEL-78705]
+- arm64: add stubs for system_supports_poe and system_supports_gcs (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmuv3: Update comments about ATS and bypass (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Log better event records (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Jerry Snitselaar) [RHEL-78705]
+- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Avoid draining PRQ in sva mm release path (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Add lockdep asserts for domain->dev_list (Jerry Snitselaar) [RHEL-78704]
+- scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-78705]
+- iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Fix typos in kernel-doc comments (Jerry Snitselaar) [RHEL-78708]
+- iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Add ops->domain_alloc_nested() (Jerry Snitselaar) [RHEL-78704]
+- scatterlist: fix a typo (Jerry Snitselaar) [RHEL-78704]
+- kmemleak: iommu/iova: fix transient kmemleak false positive (Jerry Snitselaar) [RHEL-78704]
+- iommu: Make set_dev_pasid op support domain replacement (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Jerry Snitselaar) [RHEL-78705]
+- iommu/vt-d: Add set_dev_pasid callback for nested domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add iommu_domain_did() to get did (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add pasid replace helpers (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Refactor the pasid setup helpers (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Jerry Snitselaar) [RHEL-78704]
+- iommu: Pass old domain to set_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Drain PRQs when domain removed from RID (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Drop pasid requirement for prq initialization (Jerry Snitselaar) [RHEL-78704]
+- iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Jerry Snitselaar) [RHEL-78708]
+- iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove the pasid present check in prq_event_thread (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Separate page request queue from SVM (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Drop s1_pgtbl from dmar_domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove unused dmar_msi_read (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Increase buffer size for device name (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Use PCI_DEVID() macro (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Refactor first_level_by_default() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove domain_update_iommu_superpage() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove domain_update_iommu_cap() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Enhance compatibility check for paging domain attach (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove unused domain_alloc callback (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add domain_alloc_paging support (Jerry Snitselaar) [RHEL-78704]
+- iommu/iova: Fix typo 'adderss' (Jerry Snitselaar) [RHEL-78704]
+- iommu: Create __iommu_alloc_identity_domain() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Improve amd_iommu_release_device() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Add ops->release_domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Reorder attach device code (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Convert dev_data lock from spinlock to mutex (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Rearrange attach device code (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Reduce domain lock scope in attach device path (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Do not detach devices in domain free path (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove unused amd_iommus variable (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: xarray to track protection_domain->iommu list (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove protection_domain.dev_cnt variable (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Use ida interface to manage protection domain ID (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Fix corruption when mapping large pages from 0 (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Do not try copy old DTE resume path (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Use atomic64_inc_return() in iommu.c (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Implement global identity domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Enhance amd_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Separate page table setup from domain allocation (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Add helper function to check GIOSUP/GTSUP (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Jerry Snitselaar) [RHEL-78705]
+- iommu: Add new flag to explictly request PASID capable domain (Jerry Snitselaar) [RHEL-78704]
+- iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Introduce iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Refactor __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Remove iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- remoteproc: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- gpu: host1x: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- drm/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Restore iommu_flush_iotlb_all() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Remove useless flush from iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-78704]
+- iommu/sysfs: constify the class struct (Jerry Snitselaar) [RHEL-78704]
+- iommu: Remove iommu_present() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Reorganize kerneldoc parameter names (Jerry Snitselaar) [RHEL-78704]
+- iommu: Make bus_iommu_probe() static (Jerry Snitselaar) [RHEL-78704]
+- iommu: Add a kdoc to iommu_unmap() (Jerry Snitselaar) [RHEL-78704]
+- iommu/io-pgtable-arm: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Add self test for the last page in the IAS (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-55204]
+- iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Jerry Snitselaar) [RHEL-78708]
+- selftests: iommu: Use installed kernel headers search path (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Lock all IOAS objects (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Export do_update_pinned (Jerry Snitselaar) [RHEL-78708]
+- iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Jerry Snitselaar) [RHEL-55204]
+- redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Jerry Snitselaar) [RHEL-55204]
+- ACPI/IORT: Support CANWBS memory access flag (Jerry Snitselaar) [RHEL-55204]
+- ACPICA: IORT: Update for revision E.f (Jerry Snitselaar) [RHEL-55204]
+- vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Jerry Snitselaar) [RHEL-78708]
+- Documentation: userspace-api: iommufd: Update vDEVICE (Jerry Snitselaar) [RHEL-73590]
+- iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-73590]
+- iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Jerry Snitselaar) [RHEL-73590]
+- iommufd/selftest: Add mock_viommu_cache_invalidate (Jerry Snitselaar) [RHEL-73590]
+- iommufd/viommu: Add iommufd_viommu_find_dev helper (Jerry Snitselaar) [RHEL-73590]
+- iommu: Add iommu_copy_struct_from_full_user_array helper (Jerry Snitselaar) [RHEL-73590]
+- iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-73590]
+- iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-73590]
+- iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Jerry Snitselaar) [RHEL-73590]
+- iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Jerry Snitselaar) [RHEL-73590]
+- Documentation: userspace-api: iommufd: Update vIOMMU (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Add refcount to mock_iommu_device (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Add container_of helpers (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-55217]
+- iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Verify object in iommufd_object_finalize/abort() (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Move _iommufd_object_alloc helper to a sharable file (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Move struct iommufd_object to public iommufd header (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Allow fault reporting for non-PRI PCI devices (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
+- iommufd: File mappings for mdev (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Add IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
+- iommufd: pfn_reader for file mappings (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Folio subroutines (Jerry Snitselaar) [RHEL-78708]
+- iommufd: pfn_reader local variables (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Generalize iopt_pages address (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Rename uptr in iopt_alloc_iova() (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: Add folio_add_pins() (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: handle NULL pages in unpin_user_pages() (Jerry Snitselaar) [RHEL-78708] {CVE-2024-56612}
+- mm/gup: avoid an unnecessary allocation call for FOLL_LONGTERM cases (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: stop leaking pinned pages in low memory conditions (Jerry Snitselaar) [RHEL-78708]
+- mm/hugetlb: simplify refs in memfd_alloc_folio (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: fix memfd_pin_folios alloc race panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49872}
+- mm/gup: fix memfd_pin_folios hugetlb page allocation (Jerry Snitselaar) [RHEL-78708]
+- mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak (Jerry Snitselaar) [RHEL-78708]
+- mm/hugetlb: fix memfd_pin_folios free_huge_pages leak (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49964}
+- mm/filemap: fix filemap_get_folios_contig THP panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49873}
+- mm/gup: introduce memfd_pin_folios() for pinning memfd folios (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: introduce check_and_migrate_movable_folios() (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: introduce unpin_folio/unpin_folios helpers (Jerry Snitselaar) [RHEL-78708]
+- Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Jerry Snitselaar) [RHEL-78708]
+- dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: drop unneeded includes from dma-mapping.h (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: trace more error paths (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: trace dma_alloc/free direction (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: use macros to define events in a class (Jerry Snitselaar) [RHEL-78704]
+- redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
+- dma-debug: remove DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
+- dma-debug: fix physical address calculation for struct dma_debug_entry (Jerry Snitselaar) [RHEL-78708]
+- dma-debug: store a phys_addr_t in struct dma_debug_entry (Jerry Snitselaar) [RHEL-78704]
+- dma-debug: fix a possible deadlock on radix_lock (Jerry Snitselaar) [RHEL-78704] {CVE-2024-47143}
+- docs/core-api: swiotlb: fix typos (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu: Clarify MMU-500 CPRE workaround (Jerry Snitselaar) [RHEL-78705]
+- iommu/vt-d: Cleanup apic_printk() (Jerry Snitselaar) [RHEL-78704]
+- x86/apic: Provide apic_printk() helpers (Jerry Snitselaar) [RHEL-78704]
+- iommu: Manage driver probe deferral better (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Clean up more on probe failure (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Retire probe deferral workaround (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Make instance lookup robust (Jerry Snitselaar) [RHEL-78705]
+- kselftest/arm64: signal: drop now redundant GNU_SOURCE definition (Jerry Snitselaar) [RHEL-78704]
+- selftests: mptcp: extend CFLAGS to keep options from environment (Jerry Snitselaar) [RHEL-78704]
+- selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mk (Jerry Snitselaar) [RHEL-78704]
+- of: address: always use dma_default_coherent for default coherency (Jerry Snitselaar) [RHEL-78704]
+- of: also handle dma-noncoherent in of_dma_is_coherent() (Jerry Snitselaar) [RHEL-78704]
+- virtio/vsock: Fix accept_queue memory leak (Jon Maloy) [RHEL-69713] {CVE-2024-53119}
+- sched: sch_cake: add bounds checks to host bulk flow fairness counts (Xin Long) [RHEL-77314] {CVE-2025-21647}
+- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86841] {CVE-2025-21993}
+- page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-76845]
+- page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-76845]
+- media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-85049]
+- media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-85049]
+- media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-85049]
+- media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-85049]
+- mm/gup: Refuse VM_PFNMAP in follow_page() (Donald Dutile) [RHEL-87404]
+- net: tun: unlink NAPI from device on destruction (CKI Backport Bot) [RHEL-80840] {CVE-2022-49672}
+- ata: libata-scsi: Improve CDL control (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Fix ata_msense_control_ata_feature() (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Tomas Henzl) [RHEL-72596]
+- ata: libata-sata: Save all fields from sense data descriptor (Tomas Henzl) [RHEL-72596]
+- ata: libata: Fix NCQ Non-Data log not supported print (Tomas Henzl) [RHEL-72596]
+- ata: libata: Improve return value of atapi_check_dma() (Tomas Henzl) [RHEL-72596]
+- ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Tomas Henzl) [RHEL-72596]
+- ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Tomas Henzl) [RHEL-72596]
+- ata: sata_gemini: Remove unused gemini_sata_reset_bridge() (Tomas Henzl) [RHEL-72596]
+- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Tomas Henzl) [RHEL-72596]
+- ata: Constify struct pci_device_id (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Document all VPD page inquiry actors (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Refactor ata_scsiop_maint_in() (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Refactor ata_scsi_simulate() (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Refactor scsi_6_lba_len() with use of get_unaligned_be24() (Tomas Henzl) [RHEL-72596]
+- ata: Fix typos in the comment (Tomas Henzl) [RHEL-72596]
+- net: fib_rules: Fix iif / oif matching on L3 master device (Antoine Tenart) [RHEL-84584]
+- net: fib_rules: annotate data-races around rule->[io]ifindex (Antoine Tenart) [RHEL-84584]
+- net: Remove likely from l3mdev_master_ifindex_by_index (Antoine Tenart) [RHEL-84584]
+Resolves: RHEL-55204, RHEL-55217, RHEL-69713, RHEL-72596, RHEL-73590, RHEL-75906, RHEL-76845, RHEL-77314, RHEL-77816, RHEL-78704, RHEL-78705, RHEL-78708, RHEL-80700, RHEL-80826, RHEL-80840, RHEL-83359, RHEL-84584, RHEL-85049, RHEL-86841, RHEL-87404, RHEL-88224, RHEL-88421, RHEL-88783
+
 * Tue May 06 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-583.el9]
 - Revert "io_uring/uring_cmd: defer SQE copying until it's needed" (Jeff Moyer) [RHEL-82695] {CVE-2025-21837}
 - s390/dasd: Remove DMA alignment (Mete Durlu) [RHEL-88820]
diff --git a/kernel.spec b/kernel.spec
index f3977e07e..358e09700 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 583
+%define pkgrelease 584
 %define kversion 5
-%define tarfile_release 5.14.0-583.el9
+%define tarfile_release 5.14.0-584.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 583%{?buildid}%{?dist}
+%define specrelease 584%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-583.el9
+%define kabiversion 5.14.0-584.el9
 
 #
 # End of genspec.sh variables
@@ -3666,6 +3666,335 @@ fi
 #
 #
 %changelog
+* Fri May 09 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-584.el9]
+- net: warn if NAPI instance wasn't shut down (Davide Caratti) [RHEL-77816]
+- net: hide the definition of dev_get_by_napi_id() (Davide Caratti) [RHEL-77816]
+- net: page_pool: don't try to stash the napi id (Davide Caratti) [RHEL-77816]
+- xsk: Bring back busy polling support (Davide Caratti) [RHEL-77816]
+- net: Make napi_hash_lock irq safe (Davide Caratti) [RHEL-77816]
+- netdev: prevent accessing NAPI instances from another namespace (Davide Caratti) [RHEL-77816] {CVE-2025-21659}
+- netdev-genl: Hold rcu_read_lock in napi_set (Davide Caratti) [RHEL-77816]
+- mlx4: Add support for persistent NAPI config to RX CQs (Davide Caratti) [RHEL-77816]
+- mlx5: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
+- bnxt: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
+- netdev-genl: Support setting per-NAPI config values (Davide Caratti) [RHEL-77816]
+- net: napi: Add napi_config (Davide Caratti) [RHEL-77816]
+- netdev-genl: Dump gro_flush_timeout (Davide Caratti) [RHEL-77816]
+- net: napi: Make gro_flush_timeout per-NAPI (Davide Caratti) [RHEL-77816]
+- netdev-genl: Dump napi_defer_hard_irqs (Davide Caratti) [RHEL-77816]
+- net: napi: Make napi_defer_hard_irqs per-NAPI (Davide Caratti) [RHEL-77816]
+- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-88224]
+- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-88224]
+- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-88224]
+- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-88224]
+- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Waiman Long) [RHEL-88224]
+- x86/bugs: Skip RSB fill at VMEXIT (Waiman Long) [RHEL-88224]
+- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Waiman Long) [RHEL-88224]
+- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Waiman Long) [RHEL-88224]
+- x86/bugs: Fix handling when SRSO mitigation is disabled (Waiman Long) [RHEL-88224]
+- x86/bugs: Add missing NO_SSB flag (Waiman Long) [RHEL-88224]
+- Documentation/srso: Document a method for checking safe RET operates properly (Waiman Long) [RHEL-88224]
+- redhat/configs: Add new CONFIG_MITIGATION_* kconfig files (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for GDS (Waiman Long) [RHEL-88224]
+- x86/bugs: Remove GDS Force Kconfig option (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for SSB (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for Spectre V2 (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for SRBDS (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for Spectre v1 (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for RETBLEED (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for L1TF (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for MMIO Stable Data (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for TAA (Waiman Long) [RHEL-88224]
+- x86/bugs: Add a separate config for MDS (Waiman Long) [RHEL-88224]
+- x86/cpufeatures: Flip the /proc/cpuinfo appearance logic (Waiman Long) [RHEL-88224]
+- x86/bugs: Add 'spectre_bhi=vmexit' cmdline option (Waiman Long) [RHEL-88224]
+- x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
+- x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
+- x86/cpu: Use EXPORT_PER_CPU_SYMBOL_GPL() for x86_spec_ctrl_current (Waiman Long) [RHEL-88224]
+- linux/dim: Fix divide by 0 in RDMA DIM (CKI Backport Bot) [RHEL-80826] {CVE-2022-49670}
+- scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil) [RHEL-80700]
+- scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [RHEL-80700]
+- scsi: megaraid_sas: Make most module parameters static (Chandrakanth Patil) [RHEL-80700]
+- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-88421]
+- ibmvnic: Don't reference skb after sending to VIOS (Mamatha Inamdar) [RHEL-83359] {CVE-2025-21855}
+- netfilter: nft_tunnel: fix geneve_opt type confusion addition (CKI Backport Bot) [RHEL-88783] {CVE-2025-22056}
+- iommu/amd: Fix header file (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Fix possible circular locking dependency (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add the document for Intel IOMMU debugfs (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Jerry Snitselaar) [RHEL-78704]
+- drm/tegra: Fix NULL vs IS_ERR() check in probe() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Jerry Snitselaar) [RHEL-78704]
+- iommu: Fix a spelling error (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Jerry Snitselaar) [RHEL-78704]
+- iommu: Fix potential memory leak in iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-78704]
+- iommu/hyper-v: Don't assume cpu_possible_mask is dense (Jerry Snitselaar) [RHEL-78704]
+- iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Jerry Snitselaar) [RHEL-78705]
+- iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Jerry Snitselaar) [RHEL-78708]
+- iommufd/selftest: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78708]
+- iommu/amd: Fully decode all combinations of alloc_paging_flags (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Move the nid to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove dev == NULL checks (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove unused amd_iommu_domain_update() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: remove return value of amd_iommu_detect (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove amd_iommu_apply_erratum_63() (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Modify clear_dte_entry() to avoid in-place update (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Introduce helper function get_dte256() (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Introduce helper function to update 256-bit DTE (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Jerry Snitselaar) [RHEL-75906]
+- iommu/amd: Misc ACPI IVRS debug info clean up (Jerry Snitselaar) [RHEL-75906]
+- iommu/vt-d: Link cache tags of same iommu unit together (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove iommu cap audit (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Jerry Snitselaar) [RHEL-78704]
+- iommu: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-78704]
+- lib/string_choices: Add some comments to make more clear for string choices helpers. (Jerry Snitselaar) [RHEL-78705]
+- lib/string_choices: Introduce several opposite string choice helpers (Jerry Snitselaar) [RHEL-78705]
+- lib/string_choices: Add str_true_false()/str_false_true() helper (Jerry Snitselaar) [RHEL-78705]
+- string_choices: Add wrapper for str_down_up() (Jerry Snitselaar) [RHEL-78705]
+- lib/string_choices: Add str_up_down() helper (Jerry Snitselaar) [RHEL-78705]
+- iommu: Remove the remove_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78705]
+- iommu: Detaching pasid by attaching to the blocked_domain (Jerry Snitselaar) [RHEL-78704]
+- iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Jerry Snitselaar) [RHEL-78704]
+- iommu: Prevent pasid attach if no ops->remove_dev_pasid (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Add way to debug pgtable walk (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Make pgtable walker more generic (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Add support for PRR bit setup (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Jerry Snitselaar) [RHEL-78705]
+- redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Re-enable context caching in smmu reset operation (Jerry Snitselaar) [RHEL-78705]
+- iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Jerry Snitselaar) [RHEL-78705]
+- arm64: add stubs for system_supports_poe and system_supports_gcs (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmuv3: Update comments about ATS and bypass (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Log better event records (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Jerry Snitselaar) [RHEL-78705]
+- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Avoid draining PRQ in sva mm release path (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Add lockdep asserts for domain->dev_list (Jerry Snitselaar) [RHEL-78704]
+- scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-78705]
+- iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Fix typos in kernel-doc comments (Jerry Snitselaar) [RHEL-78708]
+- iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Add ops->domain_alloc_nested() (Jerry Snitselaar) [RHEL-78704]
+- scatterlist: fix a typo (Jerry Snitselaar) [RHEL-78704]
+- kmemleak: iommu/iova: fix transient kmemleak false positive (Jerry Snitselaar) [RHEL-78704]
+- iommu: Make set_dev_pasid op support domain replacement (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Jerry Snitselaar) [RHEL-78705]
+- iommu/vt-d: Add set_dev_pasid callback for nested domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add iommu_domain_did() to get did (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add pasid replace helpers (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Refactor the pasid setup helpers (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Jerry Snitselaar) [RHEL-78704]
+- iommu: Pass old domain to set_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Drain PRQs when domain removed from RID (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Drop pasid requirement for prq initialization (Jerry Snitselaar) [RHEL-78704]
+- iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Jerry Snitselaar) [RHEL-78708]
+- iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove the pasid present check in prq_event_thread (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Separate page request queue from SVM (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Drop s1_pgtbl from dmar_domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove unused dmar_msi_read (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Increase buffer size for device name (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Use PCI_DEVID() macro (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Refactor first_level_by_default() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove domain_update_iommu_superpage() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove domain_update_iommu_cap() (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Enhance compatibility check for paging domain attach (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Remove unused domain_alloc callback (Jerry Snitselaar) [RHEL-78704]
+- iommu/vt-d: Add domain_alloc_paging support (Jerry Snitselaar) [RHEL-78704]
+- iommu/iova: Fix typo 'adderss' (Jerry Snitselaar) [RHEL-78704]
+- iommu: Create __iommu_alloc_identity_domain() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Improve amd_iommu_release_device() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Add ops->release_domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Reorder attach device code (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Convert dev_data lock from spinlock to mutex (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Rearrange attach device code (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Reduce domain lock scope in attach device path (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Do not detach devices in domain free path (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove unused amd_iommus variable (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: xarray to track protection_domain->iommu list (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Remove protection_domain.dev_cnt variable (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Use ida interface to manage protection domain ID (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Fix corruption when mapping large pages from 0 (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Do not try copy old DTE resume path (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Use atomic64_inc_return() in iommu.c (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Implement global identity domain (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Enhance amd_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Separate page table setup from domain allocation (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Jerry Snitselaar) [RHEL-78704]
+- iommu/amd: Add helper function to check GIOSUP/GTSUP (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Jerry Snitselaar) [RHEL-78705]
+- iommu: Add new flag to explictly request PASID capable domain (Jerry Snitselaar) [RHEL-78704]
+- iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Introduce iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Refactor __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Remove iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- remoteproc: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- gpu: host1x: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- drm/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Restore iommu_flush_iotlb_all() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Remove useless flush from iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-78704]
+- iommu/sysfs: constify the class struct (Jerry Snitselaar) [RHEL-78704]
+- iommu: Remove iommu_present() (Jerry Snitselaar) [RHEL-78704]
+- iommu: Reorganize kerneldoc parameter names (Jerry Snitselaar) [RHEL-78704]
+- iommu: Make bus_iommu_probe() static (Jerry Snitselaar) [RHEL-78704]
+- iommu: Add a kdoc to iommu_unmap() (Jerry Snitselaar) [RHEL-78704]
+- iommu/io-pgtable-arm: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Add self test for the last page in the IAS (Jerry Snitselaar) [RHEL-78705]
+- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-55204]
+- iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Jerry Snitselaar) [RHEL-78708]
+- selftests: iommu: Use installed kernel headers search path (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Lock all IOAS objects (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Export do_update_pinned (Jerry Snitselaar) [RHEL-78708]
+- iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Jerry Snitselaar) [RHEL-55204]
+- redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Jerry Snitselaar) [RHEL-55204]
+- iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Jerry Snitselaar) [RHEL-55204]
+- ACPI/IORT: Support CANWBS memory access flag (Jerry Snitselaar) [RHEL-55204]
+- ACPICA: IORT: Update for revision E.f (Jerry Snitselaar) [RHEL-55204]
+- vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Jerry Snitselaar) [RHEL-78708]
+- Documentation: userspace-api: iommufd: Update vDEVICE (Jerry Snitselaar) [RHEL-73590]
+- iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-73590]
+- iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Jerry Snitselaar) [RHEL-73590]
+- iommufd/selftest: Add mock_viommu_cache_invalidate (Jerry Snitselaar) [RHEL-73590]
+- iommufd/viommu: Add iommufd_viommu_find_dev helper (Jerry Snitselaar) [RHEL-73590]
+- iommu: Add iommu_copy_struct_from_full_user_array helper (Jerry Snitselaar) [RHEL-73590]
+- iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-73590]
+- iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-73590]
+- iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Jerry Snitselaar) [RHEL-73590]
+- iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Jerry Snitselaar) [RHEL-73590]
+- Documentation: userspace-api: iommufd: Update vIOMMU (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Add refcount to mock_iommu_device (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Jerry Snitselaar) [RHEL-55217]
+- iommufd/selftest: Add container_of helpers (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-55217]
+- iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Verify object in iommufd_object_finalize/abort() (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Move _iommufd_object_alloc helper to a sharable file (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Move struct iommufd_object to public iommufd header (Jerry Snitselaar) [RHEL-55217]
+- iommufd: Allow fault reporting for non-PRI PCI devices (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
+- iommufd: File mappings for mdev (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Add IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
+- iommufd: pfn_reader for file mappings (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Folio subroutines (Jerry Snitselaar) [RHEL-78708]
+- iommufd: pfn_reader local variables (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Generalize iopt_pages address (Jerry Snitselaar) [RHEL-78708]
+- iommufd: Rename uptr in iopt_alloc_iova() (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: Add folio_add_pins() (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: handle NULL pages in unpin_user_pages() (Jerry Snitselaar) [RHEL-78708] {CVE-2024-56612}
+- mm/gup: avoid an unnecessary allocation call for FOLL_LONGTERM cases (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: stop leaking pinned pages in low memory conditions (Jerry Snitselaar) [RHEL-78708]
+- mm/hugetlb: simplify refs in memfd_alloc_folio (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: fix memfd_pin_folios alloc race panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49872}
+- mm/gup: fix memfd_pin_folios hugetlb page allocation (Jerry Snitselaar) [RHEL-78708]
+- mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak (Jerry Snitselaar) [RHEL-78708]
+- mm/hugetlb: fix memfd_pin_folios free_huge_pages leak (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49964}
+- mm/filemap: fix filemap_get_folios_contig THP panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49873}
+- mm/gup: introduce memfd_pin_folios() for pinning memfd folios (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: introduce check_and_migrate_movable_folios() (Jerry Snitselaar) [RHEL-78708]
+- mm/gup: introduce unpin_folio/unpin_folios helpers (Jerry Snitselaar) [RHEL-78708]
+- Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Jerry Snitselaar) [RHEL-78708]
+- dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: drop unneeded includes from dma-mapping.h (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: trace more error paths (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: trace dma_alloc/free direction (Jerry Snitselaar) [RHEL-78704]
+- dma-mapping: use macros to define events in a class (Jerry Snitselaar) [RHEL-78704]
+- redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
+- dma-debug: remove DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
+- dma-debug: fix physical address calculation for struct dma_debug_entry (Jerry Snitselaar) [RHEL-78708]
+- dma-debug: store a phys_addr_t in struct dma_debug_entry (Jerry Snitselaar) [RHEL-78704]
+- dma-debug: fix a possible deadlock on radix_lock (Jerry Snitselaar) [RHEL-78704] {CVE-2024-47143}
+- docs/core-api: swiotlb: fix typos (Jerry Snitselaar) [RHEL-78704]
+- iommu/arm-smmu: Clarify MMU-500 CPRE workaround (Jerry Snitselaar) [RHEL-78705]
+- iommu/vt-d: Cleanup apic_printk() (Jerry Snitselaar) [RHEL-78704]
+- x86/apic: Provide apic_printk() helpers (Jerry Snitselaar) [RHEL-78704]
+- iommu: Manage driver probe deferral better (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu-v3: Clean up more on probe failure (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Retire probe deferral workaround (Jerry Snitselaar) [RHEL-78705]
+- iommu/arm-smmu: Make instance lookup robust (Jerry Snitselaar) [RHEL-78705]
+- kselftest/arm64: signal: drop now redundant GNU_SOURCE definition (Jerry Snitselaar) [RHEL-78704]
+- selftests: mptcp: extend CFLAGS to keep options from environment (Jerry Snitselaar) [RHEL-78704]
+- selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mk (Jerry Snitselaar) [RHEL-78704]
+- of: address: always use dma_default_coherent for default coherency (Jerry Snitselaar) [RHEL-78704]
+- of: also handle dma-noncoherent in of_dma_is_coherent() (Jerry Snitselaar) [RHEL-78704]
+- virtio/vsock: Fix accept_queue memory leak (Jon Maloy) [RHEL-69713] {CVE-2024-53119}
+- sched: sch_cake: add bounds checks to host bulk flow fairness counts (Xin Long) [RHEL-77314] {CVE-2025-21647}
+- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86841] {CVE-2025-21993}
+- page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-76845]
+- page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-76845]
+- media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-85049]
+- media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-85049]
+- media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-85049]
+- media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-85049]
+- mm/gup: Refuse VM_PFNMAP in follow_page() (Donald Dutile) [RHEL-87404]
+- net: tun: unlink NAPI from device on destruction (CKI Backport Bot) [RHEL-80840] {CVE-2022-49672}
+- ata: libata-scsi: Improve CDL control (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Fix ata_msense_control_ata_feature() (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Tomas Henzl) [RHEL-72596]
+- ata: libata-sata: Save all fields from sense data descriptor (Tomas Henzl) [RHEL-72596]
+- ata: libata: Fix NCQ Non-Data log not supported print (Tomas Henzl) [RHEL-72596]
+- ata: libata: Improve return value of atapi_check_dma() (Tomas Henzl) [RHEL-72596]
+- ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Tomas Henzl) [RHEL-72596]
+- ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Tomas Henzl) [RHEL-72596]
+- ata: sata_gemini: Remove unused gemini_sata_reset_bridge() (Tomas Henzl) [RHEL-72596]
+- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Tomas Henzl) [RHEL-72596]
+- ata: Constify struct pci_device_id (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Document all VPD page inquiry actors (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Refactor ata_scsiop_maint_in() (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Refactor ata_scsi_simulate() (Tomas Henzl) [RHEL-72596]
+- ata: libata-scsi: Refactor scsi_6_lba_len() with use of get_unaligned_be24() (Tomas Henzl) [RHEL-72596]
+- ata: Fix typos in the comment (Tomas Henzl) [RHEL-72596]
+- net: fib_rules: Fix iif / oif matching on L3 master device (Antoine Tenart) [RHEL-84584]
+- net: fib_rules: annotate data-races around rule->[io]ifindex (Antoine Tenart) [RHEL-84584]
+- net: Remove likely from l3mdev_master_ifindex_by_index (Antoine Tenart) [RHEL-84584]
+
 * Tue May 06 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-583.el9]
 - Revert "io_uring/uring_cmd: defer SQE copying until it's needed" (Jeff Moyer) [RHEL-82695] {CVE-2025-21837}
 - s390/dasd: Remove DMA alignment (Mete Durlu) [RHEL-88820]
diff --git a/sources b/sources
index 589cd8307..fca1b3fda 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-583.el9.tar.xz) = 9914fb3496675c15d11f9433f651eeff1a3a7f68ec62e2f8067aec38561d7d5d362bafc19493e2e61b37c152585ab32394c45e7e35c4d7b226928fb3b183a3a6
-SHA512 (kernel-abi-stablelists-5.14.0-583.el9.tar.bz2) = 8b883c7092dc5f83f45ae31f57c28afa31a309119c17fa55698ae4589e316bb00f5a0696ebf4dc01f508cca633cb155b2bf3dc70cfc0c4e01d08352c1fbd88ca
-SHA512 (kernel-kabi-dw-5.14.0-583.el9.tar.bz2) = fdc1585f269b6aef07f21b0772899224a158799e77cc1d8cd4b143fc4d1aeaf3c0165be543c3f28c3cd4879160bdb7c16ad3382183d896136650e204fa50fe27
+SHA512 (linux-5.14.0-584.el9.tar.xz) = 7aea1b540d901f58ee4f59135c190aac3981ce2f45a6a55566ee1802694413d27e452ea16c62f86c9acfdafd806041bdfa10563d60f223f735284033e602b357
+SHA512 (kernel-abi-stablelists-5.14.0-584.el9.tar.bz2) = 57c3eb54e06f92e8cf7e737a108612747da79449cea1d856afea65740d6d710f7befe6eccaf1c8a3308cb75c46b0f120daf1d3ffada91a9cbb025f669c836725
+SHA512 (kernel-kabi-dw-5.14.0-584.el9.tar.bz2) = fdc1585f269b6aef07f21b0772899224a158799e77cc1d8cd4b143fc4d1aeaf3c0165be543c3f28c3cd4879160bdb7c16ad3382183d896136650e204fa50fe27