diff --git a/Makefile.rhelver b/Makefile.rhelver
index fc6e1428e..b55cf4f75 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 3
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 253
+RHEL_RELEASE = 254
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel.changelog b/kernel.changelog
index 8cfbcedd6..38f910eda 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,489 @@
+* Thu Jul 30 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-254.el10]
+- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212683]
+- redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169468]
+- redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169468]
+- redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169468]
+- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172539] {CVE-2026-31692}
+- KVM: selftests: access_tracking_perf_test: bump number of NUMA nodes to 32 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rate-limit global clock updates on vCPU load (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fix ERAPS RAP clear on INVPCID single-context invalidation (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Swap the dst and src operand for MOVNTDQA (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Ensure gmem file sizes are multiple of host page size (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8 (Maxim Levitsky) [RHEL-151869]
+- Documentation: kvm: fix formatting of the quirks table (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: clarify leave_smm() return value (Maxim Levitsky) [RHEL-151869]
+- selftests: kvm: add a test that VMX validates controls on RSM (Maxim Levitsky) [RHEL-151869]
+- selftests: kvm: extract common functionality out of smm_test.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: check validity of VMCB controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: check validity of VMCS controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers() (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Fix a wrong MSR update in add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: synthesize CPUID bits only if CPU capability is set (Maxim Levitsky) [RHEL-151869]
+- KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add x2APIC "features" to control EOI broadcast suppression (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Harden against unexpected adjustments to kvm_cpu_caps (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise AVX10_VNNI_INT CPUID to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise AVX10.2 CPUID to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise AMX CPUIDs in subleaf 0x1E.0x1 to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise MOVRS CPUID to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Maxim Levitsky) [RHEL-151869]
+- KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Test READ=>WRITE dirty logging behavior for shadow MMU (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Print out "bad" offsets+value on VMCS config mismatch (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Remove explicit filtering of GUEST_INTR_STATUS from shadow VMCS fields (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Disallow access to vmcs12 fields that aren't supported by "hardware" (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Add a wrapper around ROL16() to get a vmcs12 from a field encoding (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Setup VMX MSRs on loading CPU during nested_vmx_hardware_setup() (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: GUP source pages prior to populating guest memory (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Document alignment requirements for KVM_TDX_INIT_MEM_REGION (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Document/enforce page-alignment for KVM_SEV_SNP_LAUNCH_UPDATE (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Remove preparation tracking (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Remove partial hugepage handling from kvm_gmem_populate() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a selftests for nested VMLOAD/VMSAVE (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Don't register posted interrupt wakeup handler if alloc_kvm_area() fails (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Drop redundant/wrong comment in nested_vmcb02_prepare_save() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Slightly simplify memstress_setup_nested() (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Remove declaration of nested_mark_vmcs12_pages_dirty() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Assert that Hyper-V's HV_SVM_EXITCODE_ENL == SVM_EXIT_SW (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Harden exit_code against being used in Spectre-like attacks (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Limit incorrect check on SVM_EXIT_ERR to running as a VM (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Treat exit_code as an unsigned 64-bit value through all of KVM (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Filter out 64-bit exit codes when invoking exit handlers on bare metal (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Check for an unexpected VM-Exit after RETPOLINE "fast" handling (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Open code handling of unexpected exits in svm_invoke_exit_handler() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Add a helper to detect VMRUN failures (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: align the code with kvm_x86_call() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Tag sev_supported_vmsa_features as read-only after init (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Drop the module param to control SEV-ES DebugSwap (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Update APICv ISR (a.k.a. SVI) as part of kvm_apic_update_apicv() (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to set virtual APICv mode on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to update APIC page on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to refresh APICv controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to update SVI on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to update TPR threshold on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to update PML controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a test to verify APICv updates (while L2 is active) (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Fix a missing kunmap_local() in sev_gmem_post_populate() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Hide KVM_IRQCHIP_KERNEL behind CONFIG_KVM_IOAPIC=y (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Bury ioapic.h definitions behind CONFIG_KVM_IOAPIC (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fold "struct dest_map" into "struct rtc_status" (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add a wrapper to handle common case of IRQ delivery without dest_map (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop MAX_NR_RESERVED_IOAPIC_PINS, use KVM_MAX_IRQ_ROUTES directly (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop guest-triggerable ASSERT()s on I/O APIC access alignment (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop ASSERT() on I/O APIC EOIs being only for LEVEL_to WARN_ON_ONCE (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop guest/user-triggerable asserts on IRR/ISR vectors (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop ASSERT()s on APIC/vCPU being non-NULL (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_set_nested_state_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use TEST_ASSERT_EQ() in test_vmx_nested_state() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Allow KVM_SET_NESTED_STATE to clear GIF when SVME==0 (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Don't set GIF when clearing EFER.SVME (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Virtualize and advertise support for ERAPS (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Don't allow L1 intercepts for instructions not advertised (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Add support for expedited writes to the fast MMIO bus (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Rename "fault_address" to "gpa" in npf_interception() (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Don't read guest CR3 when doing async pf while the MMU is direct (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Rename vm_get_page_table_entry() to vm_get_pte() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend memstress to run on nested SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_dirty_log_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Set the user bit on nested NPT PTEs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add support for nested NPTs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Allow kvm_cpu_has_ept() to be called on AMD CPUs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Move TDP mapping functions outside of vmx.c (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Reuse virt mapping functions for nested EPTs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a stage-2 MMU instance to kvm_vm (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop passing VMX metadata to TDP mapping functions (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use a TDP MMU to share EPT page tables between vCPUs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Move PTE bitmasks to kvm_mmu (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a "struct kvm_mmu_arch arch" member to kvm_mmu (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Plumb "struct kvm_mmu" into x86's MMU APIs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add "struct kvm_mmu" to track a given MMU instance (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop setting A/D bits when creating EPT PTEs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Kill eptPageTablePointer (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Rename nested TDP mapping functions (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop passing a memslot to nested_map_memslot() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Make __vm_get_page_table_entry() static (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Fix sign extension bug in get_desc64_base() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Mark APIC access page dirty when syncing vmcs12 pages (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Move nested_mark_vmcs12_pages_dirty() to vmx.c, and rename (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Precisely mark vAPIC and PID maps dirty when delivering nested PI (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Mark vmcs12 pages as dirty if and only if they're mapped (Maxim Levitsky) [RHEL-151869]
+- KVM: Use vCPU specific memslots in __kvm_vcpu_map() (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Add mediated PMU support for CPUs without "save perf global ctrl" (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Initialize vmcs01.VM_EXIT_MSR_STORE_ADDR with list address (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Dedup code for adding MSR to VMCS's auto list (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Compartmentalize adding MSRs to host vs. guest auto-load list (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Set MSR index auto-load entry if and only if entry is "new" (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Bug the VM if either MSR auto-load list is full (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Drop unused @entry_only param from add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Dedup code for removing MSR from VMCS's auto-load list (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Don't update msr_autostore count when saving TSC for vmcs12 (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Drop intermediate "guest" field from msr_autostore (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Elide WRMSRs when loading guest PMCs if values already match (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Expose enable_mediated_pmu parameter to user space (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add macros to simplify nested MSR interception setting (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Handle emulated instruction for mediated vPMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Disallow emulation in the fastpath if mediated PMCs are active (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Load/put mediated PMU context when entering/exiting guest (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Always stuff GuestOnly=1,HostOnly=0 for mediated PMCs on AMD (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Reprogram mediated PMU event selectors on event filter updates (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Introduce eventsel_hw to prepare for pmu event filtering (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Bypass perf checks when emulating mediated PMU counter accesses (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Disable interception of select PMU MSRs for mediated vPMUs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Load/save GLOBAL_CTRL via entry/exit fields for mediated PMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Disable RDPMC interception for compatible mediated vPMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Register PMI handler for mediated vPMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Implement AMD mediated PMU requirements (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Implement Intel mediated PMU requirements and constraints (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Start stubbing in mediated PMU support (Maxim Levitsky) [RHEL-151869]
+- KVM: Add a simplified wrapper for registering perf callbacks (Maxim Levitsky) [RHEL-151869]
+- perf: Use EXPORT_SYMBOL_FOR_KVM() for the mediated APIs (Maxim Levitsky) [RHEL-151869]
+- perf: Clean up mediated vPMU accounting (Maxim Levitsky) [RHEL-151869]
+- perf/x86/amd: Support PERF_PMU_CAP_MEDIATED_VPMU for AMD host (Maxim Levitsky) [RHEL-151869]
+- perf/x86/intel: Support PERF_PMU_CAP_MEDIATED_VPMU (Maxim Levitsky) [RHEL-151869]
+- perf/x86/core: Plumb mediated PMU capability from x86_pmu to x86_pmu_cap (Maxim Levitsky) [RHEL-151869]
+- perf/x86/core: Do not set bit width for unavailable counters (Maxim Levitsky) [RHEL-151869]
+- perf/x86/core: Add APIs to switch to/from mediated PMI vector (for KVM) (Maxim Levitsky) [RHEL-151869]
+- perf/x86/core: Register a new vector for handling mediated guest PMIs (Maxim Levitsky) [RHEL-151869]
+- perf: Add APIs to load/put guest mediated PMU context (Maxim Levitsky) [RHEL-151869]
+- perf: Add a EVENT_GUEST flag (Maxim Levitsky) [RHEL-151869]
+- perf: Clean up perf ctx time (Maxim Levitsky) [RHEL-151869]
+- perf: Add APIs to create/release mediated guest vPMUs (Maxim Levitsky) [RHEL-151869]
+- perf: Move security_perf_event_free() call to __free_event() (Maxim Levitsky) [RHEL-151869]
+- perf: Add generic exclude_guest support (Maxim Levitsky) [RHEL-151869]
+- perf: Skip pmu_ctx based on event_type (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Always reflect SGX EPCM #PFs back into the guest (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Test TPR / CR8 sync and interrupt masking (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Disallow setting CPUID and/or feature MSRs if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Assert that non-MSI doesn't have bypass vCPU when deleting producer (Maxim Levitsky) [RHEL-151869]
+- KVM: Don't clobber irqfd routing type when deassigning irqfd (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Check vCPU ID against max x2AVIC ID if and only if x2AVIC is enabled (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Update SVI during runtime APICv activation (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Maxim Levitsky) [RHEL-151869]
+- KVM: Harden and prepare for modifying existing guest_memfd memslots (Maxim Levitsky) [RHEL-151869]
+- KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a CPUID testcase for KVM_SET_CPUID2 with runtime updates (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Make sure vm->vpages_mapped is always up-to-date (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop using __virt_pg_map() directly in tests (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a VMX test for LA57 nested state (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Change VM_MODE_PXXV48_4K to VM_MODE_PXXVYY_4K (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use a loop to walk guest page tables (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use a loop to create guest page tables (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Remove the unused argument to prepare_eptp() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop hardcoding PAGE_SIZE in x86 selftests (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_tsc_adjust_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend nested_invalid_cr3_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Move nested invalid CR3 check to its own test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_nested_tsc_scaling_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_close_while_nested_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Remove unused declaration kvm_mmu_may_ignore_guest_pat() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Enable support for emulating AVX MOV instructions (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add emulator support for decoding VEX prefixes (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Refactor REX prefix handling in instruction emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add AVX support to the emulator's register fetch and writeback (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add x86_emulate_ops.get_xcr() callback (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Share emulator's common register decoding code (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Move op_prefix to struct x86_emulate_ctxt (from x86_decode_insn()) (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Improve formatting of the emulator's flags table (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Move Src2Shift up one bit (use bits 36:32 for Src2 in the emulator) (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add support for emulating MOVNTDQA (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add a helper to dedup loading guest/host XCR0 and XSS (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Load guest/host PKRU outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Load guest/host XCR0 and XSS outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Handle #MCs on VM-Enter/TD-Enter outside of the fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Handle #MCs in guest outside of fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Unify L1TF flushing under per-CPU variable (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Disable L1TF L1 data cache flush if CONFIG_CPU_MITIGATIONS=n (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Bundle all L1 data cache flush mitigation code together (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: KVM: Move VM_CLEAR_CPU_BUFFERS into SVM as SVM_CLEAR_CPU_BUFFERS (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Handle MMIO Stale Data in VM-Enter assembly via ALTERNATIVES_2 (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: Use an x86 feature to track the MMIO Stale Data mitigation (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: Decouple ALTERNATIVE usage from VERW macro definition (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: Use VM_CLEAR_CPU_BUFFERS in VMX as well (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Use on-stack copy of @flags in __vmx_vcpu_run() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Allocate/free user_return_msrs at kvm.ko (un)loading time (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: remove comment about ntp correction sync for (Maxim Levitsky) [RHEL-151869]
+- Revert "x86: kvm: rate-limit global clock updates" (Maxim Levitsky) [RHEL-151869]
+- Revert "x86: kvm: introduce periodic global clock updates" (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Grab lapic_timer in a local variable to cleanup periodic code (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Use "checked" versions of get_user() and put_user() (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Add known supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Publish supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
+- crypto: ccp - Add an API to return the supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Consolidate the SEV policy bits in a single header file (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Document a virtualization gap for GIF on AMD CPUs (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: Drop unnecessary export of "x86_spec_ctrl_base" (Maxim Levitsky) [RHEL-151869]
+- x86/mtrr: Drop unnecessary export of "mtrr_state" (Maxim Levitsky) [RHEL-151869]
+- x86/mm: Drop unnecessary export of "ptdump_walk_pgd_level_debugfs" (Maxim Levitsky) [RHEL-151869]
+- x86: Restrict KVM-induced symbol exports to KVM modules where obvious/possible (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Make loaded_vmcs_clear() static in vmx.c (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Don't disable IRQs when unregistering user-return notifier (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Leave user-return notifier registered on reboot/shutdown (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: WARN if user-return MSR notifier is registered on exit (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Explicitly set user-return MSRs that *may* be clobbered by the TDX-Module (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Ensure SPEC_CTRL[63:32] is context switched between guest and host (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Ensure guest's SPEC_CTRL[63:32] is loaded on VM-Enter (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Remove redundant cases in nested_svm_intercept() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Use struct_size to simplify tdx_get_capabilities() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Check size of user's kvm_tdx_capabilities array before allocating (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fix sparse warnings from using 0 for NULL (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Remove __user annotation from kernel pointer (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Take MMU lock around tdh_vp_init() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fix list_add corruption during vcpu_load() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Bug the VM if extending the initial measurement fails (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Guard VM state transitions with "all" the locks (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Don't copy "cmd" back to userspace for KVM_TDX_CAPABILITIES (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Use guard() to acquire kvm->lock in tdx_vm_ioctl() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Convert INIT_MEM_REGION and INIT_VCPU to "unlocked" vCPU ioctl (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Add tdx_get_cmd() helper to get and validate sub-ioctl command (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Add macro to retry SEAMCALLs when forcing vCPUs out of guest (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Assert that mmu_lock is held for write when removing S-EPT entries (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Derive error argument names from the local variable names (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Combine KVM_BUG_ON + pr_tdx_error() into TDX_BUG_ON() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fold tdx_sept_zap_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: ADD pages to the TD image while populating mirror EPT entries (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fold tdx_mem_page_record_premap_cnt() into its sole caller (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Use atomic64_dec_return() instead of a poor equivalent (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Avoid a double-KVM_BUG_ON() in tdx_sept_zap_private_spte() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: WARN if mirror SPTE doesn't have full RWX when creating S-EPT mapping (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Drop the return code from kvm_x86_ops.remove_external_spte() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fold tdx_sept_drop_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Return -EIO, not -EINVAL, on a KVM_BUG_ON() condition (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Drop superfluous page pinning in S-EPT management (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Rename kvm_tdp_map_page() to kvm_tdp_page_prefault() (Maxim Levitsky) [RHEL-151869]
+- Revert "KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU" (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: WARN if KVM attempts to map into an invalid TDP MMU root (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Add dedicated API to map guest_memfd pfn into TDP MMU (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Drop PROVE_MMU=y sanity check on to-be-populated mappings (Maxim Levitsky) [RHEL-151869]
+- KVM: Rename kvm_arch_vcpu_async_ioctl() to kvm_arch_vcpu_unlocked_ioctl() (Maxim Levitsky) [RHEL-151869]
+- KVM: Make support for kvm_arch_vcpu_async_ioctl() mandatory (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Move the misplaced export of kvm_zap_gfn_range() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add a helper to dedup reporting of unhandled VM-Exits (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Rename "guest_paddr" variables to "gpa" (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use "gpa" and "gva" for local variable names in pre-fault test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Forcefully override ARCH from x86_64 to x86 (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Don't fall over in mmu_stress_test when only one CPU is present (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Define a CLASS to get+put guest_memfd file from a memslot (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Add gmem_inode.flags field instead of using i_private (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add guest_memfd tests for mmap and NUMA policy support (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add helpers to probe for NUMA support, and multi-node systems (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use proper uAPI headers to pick up mempolicy.h definitions (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add additional equivalents to libnuma APIs in KVM's numaif.h (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Report stacktraces SIGBUS, SIGSEGV, SIGILL, and SIGFPE by default (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Define wrappers for common syscalls to assert success (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Enforce NUMA mempolicy using shared policy (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Add slab-allocated inode cache (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Use guest mem inodes instead of anonymous inodes (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Add macro to iterate over gmem_files for a mapping/inode (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Rename "struct kvm_gmem" to "struct gmem_file" (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Drop a superfluous local var in kvm_gmem_fault_user_mapping() (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: use folio_nr_pages() instead of shift operation (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: remove redundant gmem variable initialization (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: move kvm_gmem_get_index() and use in kvm_gmem_prepare_folio() (Maxim Levitsky) [RHEL-151869]
+- mm/mempolicy: Export memory policy symbols (Maxim Levitsky) [RHEL-151869]
+- mm/filemap: Extend __filemap_get_folio() to support NUMA memory policies (Maxim Levitsky) [RHEL-151869]
+- mm/filemap: Add NUMA mempolicy support to filemap_alloc_folio() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Add AVIC support for 4k vCPUs in x2AVIC mode (Maxim Levitsky) [RHEL-151869]
+- x86/cpufeatures: Add X86_FEATURE_X2AVIC_EXT (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Move AVIC Physical ID table allocation to vcpu_precreate() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Expand AVIC_PHYSICAL_MAX_INDEX_MASK to be a 12-bit field (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Replace hard-coded value 0x1FF with the corresponding macro (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Add a helper to look up the max physical ID for AVIC (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add an off-by-default module param to WARN on missed consistency checks (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Remove support for "early" consistency checks via hardware (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Stuff vmcs02.TSC_MULTIPLIER early on for nested early checks (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add consistency check for TSC_MULTIPLIER=0 (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add consistency check for TPR_THRESHOLD[31:4]!=0 without VID (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Use kvm_mmu_page role to construct EPTP, not current vCPU state (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Move "dummy root" helpers to spte.h (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Hardcode dummy EPTP used for early nested consistency checks (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Hoist construct_eptp() "up" in vmx.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Disallow EFER.LMSLE when not supported by hardware (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise EferLmsleUnsupported to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: Fix VM exit code for full dirty ring in API documentation (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Replace kmalloc + copy_from_user with memdup_user in tdx_td_init() (Maxim Levitsky) [RHEL-151869]
+- KVM: Explicitly allocate/setup irqfd cleanup as per-CPU workqueue (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Use vcpu instead of vmx->vcpu when vcpu is available (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Remove stale vmx_set_dr6() declaration (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Skip MMIO SPTE invalidation if enable_mmio_caching=0 (Maxim Levitsky) [RHEL-151869]
+- x86/cpufeatures: Make X86_FEATURE leaf 17 Linux-specific (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Fix redundant updates of LBR MSR intercepts (Maxim Levitsky) [RHEL-151869]
+- tools headers UAPI: Sync KVM's vmx.h with the kernel to pick SEAMCALL exit reason (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Fix and simplify LBR virtualization handling with nested (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Fix check for valid GVA on an EPT violation (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: switch to raw spinlock for svm->ir_list_lock (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Make avic_ga_log_notifier() local to avic.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Unregister KVM's GALog notifier on kvm-amd.ko exit (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Initialize per-CPU svm_data at the end of hardware setup (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Call out MSR_IA32_S_CET is not handled by XSAVES (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Harden KVM against imbalanced load/put of guest FPU state (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Unload "FPU" state on INIT if and only if its currently in-use (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Inject #UD if guest tries to execute SEAMCALL or TDCALL (Maxim Levitsky) [RHEL-151869]
+- tools headers UAPI: Sync KVM's vmx.h header with the kernel sources to handle new exit reasons (Maxim Levitsky) [RHEL-151869]
+- tools headers UAPI: Sync x86's asm/kvm.h with the kernel sources (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Don't try to get perf capabilities for hybrid CPUs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Test prefault memory during concurrent memslot removal (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop pointless exports of kvm_arch_xxx() hooks (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Move kvm_intr_is_single_vcpu() to lapic.c (Maxim Levitsky) [RHEL-151869]
+- KVM: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
+- KVM: s390/vfio-ap: Use kvm_is_gpa_in_memslot() instead of open coded equivalent (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Make CR4.CET a guest owned bit (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Verify MSRs are (not) in save/restore list when (un)supported (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add coverage for KVM-defined registers in MSRs test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add KVM_{G,S}ET_ONE_REG coverage to MSRs test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend MSRs test to validate vCPUs without supported features (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add support for MSR_IA32_{S,U}_CET to MSRs test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add an MSR test to exercise guest/host and read/write (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Enable shadow stack virtualization for SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Synchronize MSR_IA32_XSS from the GHCB when it's valid (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Pass through shadow stack MSRs as appropriate (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Update dump_vmcb with shadow stack save area additions (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Save/load CET Shadow Stack state to/from vmcb12/vmcb02 (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Emulate reads and writes to shadow stack MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Advertise new VM-Entry/Exit control bits for CET state (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add consistency checks for CET states (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Prepare for enabling CET support for nested guest (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Virtualize NO_HW_ERROR_CODE_CC for L1 event injection to L2 (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Configure nested capabilities after CPU capabilities (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Enable CET virtualization for VMX and advertise to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Disable support for IBT and SHSTK if allow_smaller_maxphyaddr is true (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Initialize allow_smaller_maxphyaddr earlier in setup (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Disable support for Shadow Stacks if TDP is disabled (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add XSS support for CET_KERNEL and CET_USER (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Always forward XSAVES/XRSTORS exits from L2 to L1 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Allow setting CR4.CET if IBT or SHSTK is supported (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Pretty print PK, SS, and SGX flags in MMU tracepoints (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: WARN on attempt to check permissions for Shadow Stack #PF (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Emulate SSP[63:32]!=0 #GP(0) for FAR JMP to 32-bit mode (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Don't emulate task switches when IBT or SHSTK is enabled (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Don't emulate instructions affected by CET features (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Set host constant supervisor states to VMCS fields (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Set up interception for CET MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Save and reload SSP to/from SMRAM (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Emulate read and write to CET MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Enable guest SSP read/write interface with new uAPIs (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Introduce CET VMCS fields and control bits (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Report KVM supported CET MSRs as to-be-saved (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add fault checks for guest CR4.CET setting (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Load guest FPU state when access XSAVE-managed MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Initialize kvm_caps.supported_xss (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Refresh CPUID on write to guest MSR_IA32_XSS (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Check XSS validity against guest CPUIDs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Report XSS as to-be-saved if there are supported features (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce KVM_{G,S}ET_ONE_REG uAPIs support (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Move global "avic" variable to avic.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Don't advise the user to do force_avic=y (when x2AVIC is detected) (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Always print "AVIC enabled" separately, even when force enabled (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Update "APICv in x2APIC without x2AVIC" in avic.c, not svm.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Make svm_x86_ops globally visible, clean up on-HyperV usage (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Validate XCR0 provided by guest in GHCB (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Read save fields from GHCB exactly once (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Rename kvm_ghcb_get_sw_exit_code() to kvm_get_cached_sw_exit_code() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Restrict GLOBAL_{CTRL,STATUS}, fixed PMCs, and PEBS to PMU v2+ (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Move initialization of valid PMCs bitmask to common x86 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Use BIT_ULL() instead of open coded equivalents (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Add helpers to toggle/change a bit in VMCS execution controls (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Use KVM_REQ_RECALC_INTERCEPTS to react to CPUID updates (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rework KVM_REQ_MSR_FILTER_CHANGED into a generic RECALC_INTERCEPTS (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Move PMU_CAP_{FW_WRITES,LBR_FMT} into msr-index.h header (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rename vmx_vmentry/vmexit_ctrl() helpers (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Snapshot host (i.e. perf's) reported PMU capabilities (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Check pmu->version, not enable_pmu, when getting PMC MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Setup canonical VMCS config prior to kvm_x86_vendor_init() (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Add SEV-SNP CipherTextHiding support (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Introduce new min,max sev_es and sev_snp asid variables (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Replace kzalloc() + copy_from_user() with memdup_user() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add support for DIV and IDIV in the fastops test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Dedup the gnarly constraints of the fastops tests (more macros!) (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add coverage for 'b' (byte) sized fastops emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Enable Secure TSC for SNP guests (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Fold sev_es_vcpu_reset() into sev_vcpu_create() (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Set RESET GHCB MSR value during sev_es_init_vmcb() (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Move init of SNP guest state into sev_init_vmcb() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Move SEV-ES VMSA allocation to a dedicated sev_vcpu_create() helper (Maxim Levitsky) [RHEL-151869]
+- x86/cpufeatures: Add SNP Secure TSC (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Enforce minimum GHCB version requirement for SEV-SNP guests (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Drop GHCB_VERSION_DEFAULT and open code it (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Zero XSTATE components on INIT by iterating over supported features (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Manually clear MPX state only on INIT (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add kvm_msr_{read,write}() helpers (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Use double-underscore read/write MSR helpers as appropriate (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rename kvm_{g,s}et_msr()* to show that they emulate guest accesses (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise support for the immediate form of MSR instructions (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Support the immediate form of WRMSRNS in the VM-Exit fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add support for RDMSR/WRMSRNS w/ immediate on Intel (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rename handle_fastpath_set_msr_irqoff() to handle_fastpath_wrmsr() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rename local "ecx" variables to "msr" and "pmc" as appropriate (Maxim Levitsky) [RHEL-151869]
+- x86/cpufeatures: Add a CPU feature bit for MSR immediate form instructions (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add a fastpath handler for INVD (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Push acquisition of SRCU in fastpath into kvm_pmu_trigger_event() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Rename check_pmu_event_filter() to pmc_is_event_allowed() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Drop redundant check on PMC being locally enabled for emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Drop redundant check on PMC being globally enabled for emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Open code pmc_event_is_allowed() in its callers (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Rename pmc_speculative_in_use() to pmc_is_locally_enabled() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Calculate set of to-be-emulated PMCs at time of WRMSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Add wrappers for counting emulated instructions/branches (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Move kvm_init_pmu_capability() to pmu.c (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fold WRMSR fastpath helpers into the main handler (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Unconditionally grab data from EDX:EAX in WRMSR fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Acquire SRCU in WRMSR fastpath iff instruction needs to be skipped (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Unconditionally handle MSR_IA32_TSC_DEADLINE in fastpath exits (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop semi-arbitrary restrictions on IPI type in fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Only allow "fast" IPIs in fastpath WRMSR(X2APIC_ICR) handler (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add kvm_icr_to_lapic_irq() helper to allow for fastpath IPIs (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Add host MSR read/write helpers to consolidate preemption handling (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Remove fastops (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Convert em_salc() to C (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_3WCL (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_1SRC2 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_2CL (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_2W (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_2R (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_2 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_1 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Implement test_cc() in C (Maxim Levitsky) [RHEL-151869]
+- module: Rename EXPORT_SYMBOL_GPL_FOR_MODULES to EXPORT_SYMBOL_FOR_MODULES (Maxim Levitsky) [RHEL-151869]
+- net: aquantia: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
+- net/mlx5e: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
+- udp: gso: Use single MSS length in UDP header for GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
+Resolves: RHEL-151869, RHEL-156516, RHEL-169468, RHEL-172539, RHEL-212683
+
 * Wed Jul 29 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-253.el10]
 - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
 - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214083] {CVE-2026-64530}
diff --git a/kernel.spec b/kernel.spec
index d30758983..9140753fd 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -179,15 +179,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 253
+%define pkgrelease 254
 %define kversion 6
-%define tarfile_release 6.12.0-253.el10
+%define tarfile_release 6.12.0-254.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 253%{?buildid}%{?dist}
+%define specrelease 254%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-253.el10
+%define kabiversion 6.12.0-254.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -933,20 +933,23 @@ Source13: redhatsecureboot501.cer
 %define signing_key_filename kernel-signing-s390.cer
 %endif
 
+# pesign cert name is auto-discovered during build from secureboot_key_0,
+# see pesign_name_0 shell variable
+#
 # Fedora/ELN pesign macro expects to see these cert file names, see:
 # https://github.com/rhboot/pesign/blob/main/src/pesign-rpmbuild-helper.in#L216
 %if 0%{?fedora}%{?eln}
-%define pesign_name_0 redhatsecureboot501
 %define secureboot_ca_0 %{SOURCE10}
 %define secureboot_key_0 %{SOURCE13}
+%define secureboot_key_uki_0 %{secureboot_key_0}
 %endif
 
 # RHEL/centos certs come from system-sb-certs
 %if 0%{?rhel} && !0%{?eln}
 %define secureboot_ca_0 %{_datadir}/pki/sb-certs/secureboot-ca-%{_arch}.cer
 %define secureboot_key_0 %{_datadir}/pki/sb-certs/secureboot-kernel-%{_arch}.cer
+%define secureboot_key_uki_0 %{_datadir}/pki/sb-certs/secureboot-uki-virt-%{_arch}.cer
 
-%define pesign_name_0 almalinuxsecureboot0
 # rhel && !eln
 %endif
 
@@ -2477,13 +2480,45 @@ BuildKernel() {
 
     SignImage=$KernelImage
 
+    get_pesign_name() {
+        # If it's a symlink, resolve it to get the pesign cert name
+        # e.g. secureboot-kernel-x86_64.cer -> redhatsecureboot801.cer
+        if [ -L "$1" ]; then
+            basename "$(readlink "$1")" .cer
+            return
+        fi
+        local fname
+        fname=$(basename "$1")
+        # If it's a regular file with a generic name (secureboot-*),
+        # find a pesign-named cert with matching content in the same dir
+        # e.g. secureboot-kernel-x86_64.cer has same md5 as centossecureboot801.cer
+        # e.g. centos-sb-certs-10.0-23.el10.noarch.rpm doesn't have symlinks
+        if [[ "$fname" == secureboot-* ]]; then
+            local dir mysum match
+            dir=$(dirname "$1")
+            mysum=$(md5sum "$1" | awk '{print $1}')
+            match=$(md5sum "$dir"/*.cer 2>/dev/null \
+                | grep -v 'secureboot-' \
+                | awk -v s="$mysum" '$1 == s {print $2; exit}')
+            if [ -n "$match" ]; then
+                basename "$match" .cer
+                return
+            fi
+        fi
+        # Fallback: use the filename as-is
+        basename "$1" .cer
+    }
+
+    pesign_name_0=$(get_pesign_name %{secureboot_key_0})
+    %{log_msg "kernel signing: secureboot_key_0=%{secureboot_key_0} pesign_name_0=$pesign_name_0"}
+
     %ifarch x86_64 aarch64
     %{log_msg "Sign kernel image"}
-    %pesign -s -i $SignImage -o vmlinuz.signed -a %{secureboot_ca_0} -c %{secureboot_key_0} -n %{pesign_name_0}
+    %pesign -s -i $SignImage -o vmlinuz.signed -a %{secureboot_ca_0} -c %{secureboot_key_0} -n $pesign_name_0
     %endif
     %ifarch s390x ppc64le
     if [ -x /usr/bin/rpm-sign ]; then
-	rpm-sign --key "%{pesign_name_0}" --lkmsign $SignImage --output vmlinuz.signed
+	rpm-sign --key "$pesign_name_0" --lkmsign $SignImage --output vmlinuz.signed
     elif [ "$DoModules" == "1" -a "%{signmodules}" == "1" ]; then
 	chmod +x scripts/sign-file
 	./scripts/sign-file -p sha256 certs/signing_key.pem certs/signing_key.x509 $SignImage vmlinuz.signed
@@ -2866,18 +2901,18 @@ BuildKernel() {
     cp System.map $RPM_BUILD_ROOT/.
 
     if [[ "$Variant" == "rt" || "$Variant" == "rt-debug" || "$Variant" == "rt-64k" || "$Variant" == "rt-64k-debug" || "$Variant" == "automotive" || "$Variant" == "automotive-debug" ]]; then
-	%{log_msg "Skipping efiuki build"}
+        %{log_msg "Skipping efiuki build"}
     else
 %if %{with_efiuki}
         %{log_msg "Setup the EFI UKI kernel"}
 
-	KernelUnifiedImageDir="$RPM_BUILD_ROOT/lib/modules/$KernelVer"
-    	KernelUnifiedImage="$KernelUnifiedImageDir/$InstallName-virt.efi"
-	KernelUnifiedInitrd="$KernelUnifiedImageDir/$InstallName-virt.img"
+        KernelUnifiedImageDir="$RPM_BUILD_ROOT/lib/modules/$KernelVer"
+        KernelUnifiedImage="$KernelUnifiedImageDir/$InstallName-virt.efi"
+        KernelUnifiedInitrd="$KernelUnifiedImageDir/$InstallName-virt.img"
 
-    	mkdir -p $KernelUnifiedImageDir
+        mkdir -p $KernelUnifiedImageDir
 
-    	dracut --conf=%{SOURCE86} \
+        dracut --conf=%{SOURCE86} \
            --confdir=$(mktemp -d) \
            --no-hostonly \
            --verbose \
@@ -2886,56 +2921,45 @@ BuildKernel() {
            --logfile=$(mktemp) \
            $KernelUnifiedInitrd
 
-       ukify build --linux $(realpath $KernelImage) --initrd $KernelUnifiedInitrd \
-          --sbat @uki.sbat --os-release @/etc/os-release --uname $KernelVer \
-          --cmdline 'console=tty0 console=ttyS0' --output $KernelUnifiedImage
+        ukify build --linux $(realpath $KernelImage) --initrd $KernelUnifiedInitrd \
+           --sbat @uki.sbat --os-release @/etc/os-release --uname $KernelVer \
+           --cmdline 'console=tty0 console=ttyS0' --output $KernelUnifiedImage
 
-       rm -f $KernelUnifiedInitrd
+        rm -f $KernelUnifiedInitrd
 
-  KernelAddonsDirOut="$KernelUnifiedImage.extra.d"
-  mkdir -p $KernelAddonsDirOut
-  python3 %{SOURCE151} %{SOURCE152} $KernelAddonsDirOut virt %{primary_target} %{_target_cpu} @uki-addons.sbat
+        KernelAddonsDirOut="$KernelUnifiedImage.extra.d"
+        mkdir -p $KernelAddonsDirOut
+        python3 %{SOURCE151} %{SOURCE152} $KernelAddonsDirOut virt %{primary_target} %{_target_cpu} @uki-addons.sbat
 
 %if %{signkernel}
-	%{log_msg "Sign the EFI UKI kernel"}
-%if 0%{?fedora}%{?eln}
-        %pesign -s -i $KernelUnifiedImage -o $KernelUnifiedImage.signed -a %{secureboot_ca_0} -c %{secureboot_key_0} -n %{pesign_name_0}
-%else
-UKI_secureboot_name=%{pesign_name_0}
-UKI_secureboot_cert=%{_datadir}/pki/sb-certs/secureboot-uki-virt-%{_arch}.cer
-
-        %pesign -s -i $KernelUnifiedImage -o $KernelUnifiedImage.signed -a %{secureboot_ca_0} -c $UKI_secureboot_cert -n $UKI_secureboot_name
-        for addon in "$KernelAddonsDirOut"/*; do
-            %pesign -s -i $addon -o $addon.signed -a %{secureboot_ca_0} -c $UKI_secureboot_cert -n $UKI_secureboot_name
-            rm -f $addon
-            mv $addon.signed $addon
-        done
-# 0%{?fedora}%{?eln}
-%endif
+        %{log_msg "Sign the EFI UKI kernel"}
+        pesign_name_uki_0=$(get_pesign_name %{secureboot_key_uki_0})
+        %{log_msg "UKI signing: secureboot_key_uki_0=%{secureboot_key_uki_0} pesign_name_uki_0=$pesign_name_uki_0"}
+        %pesign -s -i $KernelUnifiedImage -o $KernelUnifiedImage.signed -a %{secureboot_ca_0} -c %{secureboot_key_uki_0} -n $pesign_name_uki_0
         if [ ! -s $KernelUnifiedImage.signed ]; then
             echo "pesigning failed"
             exit 1
         fi
         mv $KernelUnifiedImage.signed $KernelUnifiedImage
 
-      mkdir -p $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer
-      cp -a $UKI_secureboot_cert $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/secureboot-uki-%{_arch}.cer
-
-# signkernel
+        for addon in "$KernelAddonsDirOut"/*; do
+           %pesign -s -i $addon -o $addon.signed -a %{secureboot_ca_0} -c %{secureboot_key_0} -n $pesign_name_0
+           rm -f $addon
+           mv $addon.signed $addon
+        done
 %endif
 
-    # hmac sign the UKI for FIPS
-    KernelUnifiedImageHMAC="$KernelUnifiedImageDir/.$InstallName-virt.efi.hmac"
-    %{log_msg "hmac sign the UKI for FIPS"}
-    %{log_msg "Creating hmac file: $KernelUnifiedImageHMAC"}
-    (cd $KernelUnifiedImageDir && sha512hmac $InstallName-virt.efi) > $KernelUnifiedImageHMAC;
+        # hmac sign the UKI for FIPS
+        KernelUnifiedImageHMAC="$KernelUnifiedImageDir/.$InstallName-virt.efi.hmac"
+        %{log_msg "hmac sign the UKI for FIPS"}
+        %{log_msg "Creating hmac file: $KernelUnifiedImageHMAC"}
+        (cd $KernelUnifiedImageDir && sha512hmac $InstallName-virt.efi) > $KernelUnifiedImageHMAC;
 
 # with_efiuki
 %endif
-	:  # in case of empty block
+        :  # in case of empty block
     fi # "$Variant" == "rt" || "$Variant" == "rt-debug" || "$Variant" == "automotive" || "$Variant" == "automotive-debug"
 
-
     #
     # Generate the modules files lists
     #
@@ -4659,14 +4683,14 @@ fi\
 #
 #
 %changelog
-* Fri Jul 31 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-253
+* Mon Aug 03 2026 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-254
 - Debrand for AlmaLinux OS
 - Use AlmaLinux OS secure boot cert
 
-* Fri Jul 31 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-253
+* Mon Aug 03 2026 Neal Gompa <ngompa@almalinux.org> - 6.12.0-254
 - Enable Btrfs support for all kernel variants
 
-* Fri Jul 31 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-253
+* Mon Aug 03 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-254
 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@@ -4676,6 +4700,491 @@ fi\
 - kernel/rh_messages.h: enable all disabled pci devices by moving to
   unmaintained
 
+* Thu Jul 30 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-254.el10]
+- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212683]
+- redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169468]
+- redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169468]
+- redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169468]
+- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172539] {CVE-2026-31692}
+- KVM: selftests: access_tracking_perf_test: bump number of NUMA nodes to 32 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rate-limit global clock updates on vCPU load (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fix ERAPS RAP clear on INVPCID single-context invalidation (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Swap the dst and src operand for MOVNTDQA (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Ensure gmem file sizes are multiple of host page size (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8 (Maxim Levitsky) [RHEL-151869]
+- Documentation: kvm: fix formatting of the quirks table (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: clarify leave_smm() return value (Maxim Levitsky) [RHEL-151869]
+- selftests: kvm: add a test that VMX validates controls on RSM (Maxim Levitsky) [RHEL-151869]
+- selftests: kvm: extract common functionality out of smm_test.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: check validity of VMCB controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: check validity of VMCS controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers() (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Fix a wrong MSR update in add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: synthesize CPUID bits only if CPU capability is set (Maxim Levitsky) [RHEL-151869]
+- KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add x2APIC "features" to control EOI broadcast suppression (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Harden against unexpected adjustments to kvm_cpu_caps (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise AVX10_VNNI_INT CPUID to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise AVX10.2 CPUID to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise AMX CPUIDs in subleaf 0x1E.0x1 to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise MOVRS CPUID to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Maxim Levitsky) [RHEL-151869]
+- KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Test READ=>WRITE dirty logging behavior for shadow MMU (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Print out "bad" offsets+value on VMCS config mismatch (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Remove explicit filtering of GUEST_INTR_STATUS from shadow VMCS fields (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Disallow access to vmcs12 fields that aren't supported by "hardware" (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Add a wrapper around ROL16() to get a vmcs12 from a field encoding (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Setup VMX MSRs on loading CPU during nested_vmx_hardware_setup() (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: GUP source pages prior to populating guest memory (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Document alignment requirements for KVM_TDX_INIT_MEM_REGION (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Document/enforce page-alignment for KVM_SEV_SNP_LAUNCH_UPDATE (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Remove preparation tracking (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Remove partial hugepage handling from kvm_gmem_populate() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a selftests for nested VMLOAD/VMSAVE (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Don't register posted interrupt wakeup handler if alloc_kvm_area() fails (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Drop redundant/wrong comment in nested_vmcb02_prepare_save() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Slightly simplify memstress_setup_nested() (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Remove declaration of nested_mark_vmcs12_pages_dirty() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Assert that Hyper-V's HV_SVM_EXITCODE_ENL == SVM_EXIT_SW (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Harden exit_code against being used in Spectre-like attacks (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Limit incorrect check on SVM_EXIT_ERR to running as a VM (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Treat exit_code as an unsigned 64-bit value through all of KVM (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Filter out 64-bit exit codes when invoking exit handlers on bare metal (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Check for an unexpected VM-Exit after RETPOLINE "fast" handling (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Open code handling of unexpected exits in svm_invoke_exit_handler() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Add a helper to detect VMRUN failures (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: align the code with kvm_x86_call() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Tag sev_supported_vmsa_features as read-only after init (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Drop the module param to control SEV-ES DebugSwap (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Update APICv ISR (a.k.a. SVI) as part of kvm_apic_update_apicv() (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to set virtual APICv mode on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to update APIC page on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to refresh APICv controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to update SVI on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to update TPR threshold on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Switch to vmcs01 to update PML controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a test to verify APICv updates (while L2 is active) (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Fix a missing kunmap_local() in sev_gmem_post_populate() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Hide KVM_IRQCHIP_KERNEL behind CONFIG_KVM_IOAPIC=y (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Bury ioapic.h definitions behind CONFIG_KVM_IOAPIC (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fold "struct dest_map" into "struct rtc_status" (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add a wrapper to handle common case of IRQ delivery without dest_map (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop MAX_NR_RESERVED_IOAPIC_PINS, use KVM_MAX_IRQ_ROUTES directly (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop guest-triggerable ASSERT()s on I/O APIC access alignment (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop ASSERT() on I/O APIC EOIs being only for LEVEL_to WARN_ON_ONCE (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop guest/user-triggerable asserts on IRR/ISR vectors (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop ASSERT()s on APIC/vCPU being non-NULL (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_set_nested_state_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use TEST_ASSERT_EQ() in test_vmx_nested_state() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Allow KVM_SET_NESTED_STATE to clear GIF when SVME==0 (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Don't set GIF when clearing EFER.SVME (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Virtualize and advertise support for ERAPS (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Don't allow L1 intercepts for instructions not advertised (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Add support for expedited writes to the fast MMIO bus (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Rename "fault_address" to "gpa" in npf_interception() (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Don't read guest CR3 when doing async pf while the MMU is direct (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Rename vm_get_page_table_entry() to vm_get_pte() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend memstress to run on nested SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_dirty_log_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Set the user bit on nested NPT PTEs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add support for nested NPTs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Allow kvm_cpu_has_ept() to be called on AMD CPUs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Move TDP mapping functions outside of vmx.c (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Reuse virt mapping functions for nested EPTs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a stage-2 MMU instance to kvm_vm (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop passing VMX metadata to TDP mapping functions (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use a TDP MMU to share EPT page tables between vCPUs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Move PTE bitmasks to kvm_mmu (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a "struct kvm_mmu_arch arch" member to kvm_mmu (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Plumb "struct kvm_mmu" into x86's MMU APIs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add "struct kvm_mmu" to track a given MMU instance (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop setting A/D bits when creating EPT PTEs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Kill eptPageTablePointer (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Rename nested TDP mapping functions (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop passing a memslot to nested_map_memslot() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Make __vm_get_page_table_entry() static (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Fix sign extension bug in get_desc64_base() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Mark APIC access page dirty when syncing vmcs12 pages (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Move nested_mark_vmcs12_pages_dirty() to vmx.c, and rename (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Precisely mark vAPIC and PID maps dirty when delivering nested PI (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Mark vmcs12 pages as dirty if and only if they're mapped (Maxim Levitsky) [RHEL-151869]
+- KVM: Use vCPU specific memslots in __kvm_vcpu_map() (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Add mediated PMU support for CPUs without "save perf global ctrl" (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Initialize vmcs01.VM_EXIT_MSR_STORE_ADDR with list address (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Dedup code for adding MSR to VMCS's auto list (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Compartmentalize adding MSRs to host vs. guest auto-load list (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Set MSR index auto-load entry if and only if entry is "new" (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Bug the VM if either MSR auto-load list is full (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Drop unused @entry_only param from add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Dedup code for removing MSR from VMCS's auto-load list (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Don't update msr_autostore count when saving TSC for vmcs12 (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Drop intermediate "guest" field from msr_autostore (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Elide WRMSRs when loading guest PMCs if values already match (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Expose enable_mediated_pmu parameter to user space (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add macros to simplify nested MSR interception setting (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Handle emulated instruction for mediated vPMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Disallow emulation in the fastpath if mediated PMCs are active (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Load/put mediated PMU context when entering/exiting guest (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Always stuff GuestOnly=1,HostOnly=0 for mediated PMCs on AMD (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Reprogram mediated PMU event selectors on event filter updates (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Introduce eventsel_hw to prepare for pmu event filtering (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Bypass perf checks when emulating mediated PMU counter accesses (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Disable interception of select PMU MSRs for mediated vPMUs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Load/save GLOBAL_CTRL via entry/exit fields for mediated PMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Disable RDPMC interception for compatible mediated vPMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Register PMI handler for mediated vPMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Implement AMD mediated PMU requirements (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Implement Intel mediated PMU requirements and constraints (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Start stubbing in mediated PMU support (Maxim Levitsky) [RHEL-151869]
+- KVM: Add a simplified wrapper for registering perf callbacks (Maxim Levitsky) [RHEL-151869]
+- perf: Use EXPORT_SYMBOL_FOR_KVM() for the mediated APIs (Maxim Levitsky) [RHEL-151869]
+- perf: Clean up mediated vPMU accounting (Maxim Levitsky) [RHEL-151869]
+- perf/x86/amd: Support PERF_PMU_CAP_MEDIATED_VPMU for AMD host (Maxim Levitsky) [RHEL-151869]
+- perf/x86/intel: Support PERF_PMU_CAP_MEDIATED_VPMU (Maxim Levitsky) [RHEL-151869]
+- perf/x86/core: Plumb mediated PMU capability from x86_pmu to x86_pmu_cap (Maxim Levitsky) [RHEL-151869]
+- perf/x86/core: Do not set bit width for unavailable counters (Maxim Levitsky) [RHEL-151869]
+- perf/x86/core: Add APIs to switch to/from mediated PMI vector (for KVM) (Maxim Levitsky) [RHEL-151869]
+- perf/x86/core: Register a new vector for handling mediated guest PMIs (Maxim Levitsky) [RHEL-151869]
+- perf: Add APIs to load/put guest mediated PMU context (Maxim Levitsky) [RHEL-151869]
+- perf: Add a EVENT_GUEST flag (Maxim Levitsky) [RHEL-151869]
+- perf: Clean up perf ctx time (Maxim Levitsky) [RHEL-151869]
+- perf: Add APIs to create/release mediated guest vPMUs (Maxim Levitsky) [RHEL-151869]
+- perf: Move security_perf_event_free() call to __free_event() (Maxim Levitsky) [RHEL-151869]
+- perf: Add generic exclude_guest support (Maxim Levitsky) [RHEL-151869]
+- perf: Skip pmu_ctx based on event_type (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Always reflect SGX EPCM #PFs back into the guest (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Test TPR / CR8 sync and interrupt masking (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Disallow setting CPUID and/or feature MSRs if L2 is active (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Assert that non-MSI doesn't have bypass vCPU when deleting producer (Maxim Levitsky) [RHEL-151869]
+- KVM: Don't clobber irqfd routing type when deassigning irqfd (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Check vCPU ID against max x2AVIC ID if and only if x2AVIC is enabled (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Update SVI during runtime APICv activation (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Maxim Levitsky) [RHEL-151869]
+- KVM: Harden and prepare for modifying existing guest_memfd memslots (Maxim Levitsky) [RHEL-151869]
+- KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a CPUID testcase for KVM_SET_CPUID2 with runtime updates (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Make sure vm->vpages_mapped is always up-to-date (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop using __virt_pg_map() directly in tests (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add a VMX test for LA57 nested state (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Change VM_MODE_PXXV48_4K to VM_MODE_PXXVYY_4K (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use a loop to walk guest page tables (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use a loop to create guest page tables (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Remove the unused argument to prepare_eptp() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Stop hardcoding PAGE_SIZE in x86 selftests (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_tsc_adjust_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend nested_invalid_cr3_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Move nested invalid CR3 check to its own test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_nested_tsc_scaling_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend vmx_close_while_nested_test to cover SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Remove unused declaration kvm_mmu_may_ignore_guest_pat() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Enable support for emulating AVX MOV instructions (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add emulator support for decoding VEX prefixes (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Refactor REX prefix handling in instruction emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add AVX support to the emulator's register fetch and writeback (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add x86_emulate_ops.get_xcr() callback (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Share emulator's common register decoding code (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Move op_prefix to struct x86_emulate_ctxt (from x86_decode_insn()) (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Improve formatting of the emulator's flags table (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Move Src2Shift up one bit (use bits 36:32 for Src2 in the emulator) (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add support for emulating MOVNTDQA (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add a helper to dedup loading guest/host XCR0 and XSS (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Load guest/host PKRU outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Load guest/host XCR0 and XSS outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Handle #MCs on VM-Enter/TD-Enter outside of the fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Handle #MCs in guest outside of fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Unify L1TF flushing under per-CPU variable (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Disable L1TF L1 data cache flush if CONFIG_CPU_MITIGATIONS=n (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Bundle all L1 data cache flush mitigation code together (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: KVM: Move VM_CLEAR_CPU_BUFFERS into SVM as SVM_CLEAR_CPU_BUFFERS (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Handle MMIO Stale Data in VM-Enter assembly via ALTERNATIVES_2 (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: Use an x86 feature to track the MMIO Stale Data mitigation (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: Decouple ALTERNATIVE usage from VERW macro definition (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: Use VM_CLEAR_CPU_BUFFERS in VMX as well (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Use on-stack copy of @flags in __vmx_vcpu_run() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Allocate/free user_return_msrs at kvm.ko (un)loading time (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: remove comment about ntp correction sync for (Maxim Levitsky) [RHEL-151869]
+- Revert "x86: kvm: rate-limit global clock updates" (Maxim Levitsky) [RHEL-151869]
+- Revert "x86: kvm: introduce periodic global clock updates" (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Grab lapic_timer in a local variable to cleanup periodic code (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Use "checked" versions of get_user() and put_user() (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Add known supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Publish supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
+- crypto: ccp - Add an API to return the supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Consolidate the SEV policy bits in a single header file (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Document a virtualization gap for GIF on AMD CPUs (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Maxim Levitsky) [RHEL-151869]
+- x86/bugs: Drop unnecessary export of "x86_spec_ctrl_base" (Maxim Levitsky) [RHEL-151869]
+- x86/mtrr: Drop unnecessary export of "mtrr_state" (Maxim Levitsky) [RHEL-151869]
+- x86/mm: Drop unnecessary export of "ptdump_walk_pgd_level_debugfs" (Maxim Levitsky) [RHEL-151869]
+- x86: Restrict KVM-induced symbol exports to KVM modules where obvious/possible (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Make loaded_vmcs_clear() static in vmx.c (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Don't disable IRQs when unregistering user-return notifier (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Leave user-return notifier registered on reboot/shutdown (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: WARN if user-return MSR notifier is registered on exit (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Explicitly set user-return MSRs that *may* be clobbered by the TDX-Module (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Ensure SPEC_CTRL[63:32] is context switched between guest and host (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Ensure guest's SPEC_CTRL[63:32] is loaded on VM-Enter (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Remove redundant cases in nested_svm_intercept() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Use struct_size to simplify tdx_get_capabilities() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Check size of user's kvm_tdx_capabilities array before allocating (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fix sparse warnings from using 0 for NULL (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Remove __user annotation from kernel pointer (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Take MMU lock around tdh_vp_init() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fix list_add corruption during vcpu_load() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Bug the VM if extending the initial measurement fails (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Guard VM state transitions with "all" the locks (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Don't copy "cmd" back to userspace for KVM_TDX_CAPABILITIES (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Use guard() to acquire kvm->lock in tdx_vm_ioctl() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Convert INIT_MEM_REGION and INIT_VCPU to "unlocked" vCPU ioctl (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Add tdx_get_cmd() helper to get and validate sub-ioctl command (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Add macro to retry SEAMCALLs when forcing vCPUs out of guest (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Assert that mmu_lock is held for write when removing S-EPT entries (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Derive error argument names from the local variable names (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Combine KVM_BUG_ON + pr_tdx_error() into TDX_BUG_ON() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fold tdx_sept_zap_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: ADD pages to the TD image while populating mirror EPT entries (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fold tdx_mem_page_record_premap_cnt() into its sole caller (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Use atomic64_dec_return() instead of a poor equivalent (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Avoid a double-KVM_BUG_ON() in tdx_sept_zap_private_spte() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: WARN if mirror SPTE doesn't have full RWX when creating S-EPT mapping (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Drop the return code from kvm_x86_ops.remove_external_spte() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Fold tdx_sept_drop_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Return -EIO, not -EINVAL, on a KVM_BUG_ON() condition (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Drop superfluous page pinning in S-EPT management (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Rename kvm_tdp_map_page() to kvm_tdp_page_prefault() (Maxim Levitsky) [RHEL-151869]
+- Revert "KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU" (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: WARN if KVM attempts to map into an invalid TDP MMU root (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Add dedicated API to map guest_memfd pfn into TDP MMU (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Drop PROVE_MMU=y sanity check on to-be-populated mappings (Maxim Levitsky) [RHEL-151869]
+- KVM: Rename kvm_arch_vcpu_async_ioctl() to kvm_arch_vcpu_unlocked_ioctl() (Maxim Levitsky) [RHEL-151869]
+- KVM: Make support for kvm_arch_vcpu_async_ioctl() mandatory (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Move the misplaced export of kvm_zap_gfn_range() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add a helper to dedup reporting of unhandled VM-Exits (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Rename "guest_paddr" variables to "gpa" (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use "gpa" and "gva" for local variable names in pre-fault test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Forcefully override ARCH from x86_64 to x86 (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Don't fall over in mmu_stress_test when only one CPU is present (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Define a CLASS to get+put guest_memfd file from a memslot (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Add gmem_inode.flags field instead of using i_private (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add guest_memfd tests for mmap and NUMA policy support (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add helpers to probe for NUMA support, and multi-node systems (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Use proper uAPI headers to pick up mempolicy.h definitions (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add additional equivalents to libnuma APIs in KVM's numaif.h (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Report stacktraces SIGBUS, SIGSEGV, SIGILL, and SIGFPE by default (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Define wrappers for common syscalls to assert success (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Enforce NUMA mempolicy using shared policy (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Add slab-allocated inode cache (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Use guest mem inodes instead of anonymous inodes (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Add macro to iterate over gmem_files for a mapping/inode (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Rename "struct kvm_gmem" to "struct gmem_file" (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Drop a superfluous local var in kvm_gmem_fault_user_mapping() (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: use folio_nr_pages() instead of shift operation (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: remove redundant gmem variable initialization (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: move kvm_gmem_get_index() and use in kvm_gmem_prepare_folio() (Maxim Levitsky) [RHEL-151869]
+- mm/mempolicy: Export memory policy symbols (Maxim Levitsky) [RHEL-151869]
+- mm/filemap: Extend __filemap_get_folio() to support NUMA memory policies (Maxim Levitsky) [RHEL-151869]
+- mm/filemap: Add NUMA mempolicy support to filemap_alloc_folio() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Add AVIC support for 4k vCPUs in x2AVIC mode (Maxim Levitsky) [RHEL-151869]
+- x86/cpufeatures: Add X86_FEATURE_X2AVIC_EXT (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Move AVIC Physical ID table allocation to vcpu_precreate() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Expand AVIC_PHYSICAL_MAX_INDEX_MASK to be a 12-bit field (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Replace hard-coded value 0x1FF with the corresponding macro (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Add a helper to look up the max physical ID for AVIC (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add an off-by-default module param to WARN on missed consistency checks (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Remove support for "early" consistency checks via hardware (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Stuff vmcs02.TSC_MULTIPLIER early on for nested early checks (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add consistency check for TSC_MULTIPLIER=0 (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add consistency check for TPR_THRESHOLD[31:4]!=0 without VID (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Use kvm_mmu_page role to construct EPTP, not current vCPU state (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Move "dummy root" helpers to spte.h (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Hardcode dummy EPTP used for early nested consistency checks (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Hoist construct_eptp() "up" in vmx.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Disallow EFER.LMSLE when not supported by hardware (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise EferLmsleUnsupported to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: Fix VM exit code for full dirty ring in API documentation (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
+- KVM: TDX: Replace kmalloc + copy_from_user with memdup_user in tdx_td_init() (Maxim Levitsky) [RHEL-151869]
+- KVM: Explicitly allocate/setup irqfd cleanup as per-CPU workqueue (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Use vcpu instead of vmx->vcpu when vcpu is available (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Remove stale vmx_set_dr6() declaration (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Skip MMIO SPTE invalidation if enable_mmio_caching=0 (Maxim Levitsky) [RHEL-151869]
+- x86/cpufeatures: Make X86_FEATURE leaf 17 Linux-specific (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Fix redundant updates of LBR MSR intercepts (Maxim Levitsky) [RHEL-151869]
+- tools headers UAPI: Sync KVM's vmx.h with the kernel to pick SEAMCALL exit reason (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Fix and simplify LBR virtualization handling with nested (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Fix check for valid GVA on an EPT violation (Maxim Levitsky) [RHEL-151869]
+- KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: switch to raw spinlock for svm->ir_list_lock (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Make avic_ga_log_notifier() local to avic.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Unregister KVM's GALog notifier on kvm-amd.ko exit (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Initialize per-CPU svm_data at the end of hardware setup (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Call out MSR_IA32_S_CET is not handled by XSAVES (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Harden KVM against imbalanced load/put of guest FPU state (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Unload "FPU" state on INIT if and only if its currently in-use (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Inject #UD if guest tries to execute SEAMCALL or TDCALL (Maxim Levitsky) [RHEL-151869]
+- tools headers UAPI: Sync KVM's vmx.h header with the kernel sources to handle new exit reasons (Maxim Levitsky) [RHEL-151869]
+- tools headers UAPI: Sync x86's asm/kvm.h with the kernel sources (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Don't try to get perf capabilities for hybrid CPUs (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Test prefault memory during concurrent memslot removal (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop pointless exports of kvm_arch_xxx() hooks (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Move kvm_intr_is_single_vcpu() to lapic.c (Maxim Levitsky) [RHEL-151869]
+- KVM: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
+- KVM: s390/vfio-ap: Use kvm_is_gpa_in_memslot() instead of open coded equivalent (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Make CR4.CET a guest owned bit (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Verify MSRs are (not) in save/restore list when (un)supported (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add coverage for KVM-defined registers in MSRs test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add KVM_{G,S}ET_ONE_REG coverage to MSRs test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Extend MSRs test to validate vCPUs without supported features (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add support for MSR_IA32_{S,U}_CET to MSRs test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add an MSR test to exercise guest/host and read/write (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Enable shadow stack virtualization for SVM (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Synchronize MSR_IA32_XSS from the GHCB when it's valid (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Pass through shadow stack MSRs as appropriate (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Update dump_vmcb with shadow stack save area additions (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Save/load CET Shadow Stack state to/from vmcb12/vmcb02 (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Emulate reads and writes to shadow stack MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Advertise new VM-Entry/Exit control bits for CET state (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add consistency checks for CET states (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Prepare for enabling CET support for nested guest (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Virtualize NO_HW_ERROR_CODE_CC for L1 event injection to L2 (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Configure nested capabilities after CPU capabilities (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Enable CET virtualization for VMX and advertise to userspace (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Disable support for IBT and SHSTK if allow_smaller_maxphyaddr is true (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Initialize allow_smaller_maxphyaddr earlier in setup (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Disable support for Shadow Stacks if TDP is disabled (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add XSS support for CET_KERNEL and CET_USER (Maxim Levitsky) [RHEL-151869]
+- KVM: nVMX: Always forward XSAVES/XRSTORS exits from L2 to L1 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Allow setting CR4.CET if IBT or SHSTK is supported (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Pretty print PK, SS, and SGX flags in MMU tracepoints (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: WARN on attempt to check permissions for Shadow Stack #PF (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Emulate SSP[63:32]!=0 #GP(0) for FAR JMP to 32-bit mode (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Don't emulate task switches when IBT or SHSTK is enabled (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Don't emulate instructions affected by CET features (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Set host constant supervisor states to VMCS fields (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Set up interception for CET MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Save and reload SSP to/from SMRAM (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Emulate read and write to CET MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Enable guest SSP read/write interface with new uAPIs (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Introduce CET VMCS fields and control bits (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Report KVM supported CET MSRs as to-be-saved (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add fault checks for guest CR4.CET setting (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Load guest FPU state when access XSAVE-managed MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Initialize kvm_caps.supported_xss (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Refresh CPUID on write to guest MSR_IA32_XSS (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Check XSS validity against guest CPUIDs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Report XSS as to-be-saved if there are supported features (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce KVM_{G,S}ET_ONE_REG uAPIs support (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Move global "avic" variable to avic.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Don't advise the user to do force_avic=y (when x2AVIC is detected) (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Always print "AVIC enabled" separately, even when force enabled (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Update "APICv in x2APIC without x2AVIC" in avic.c, not svm.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Make svm_x86_ops globally visible, clean up on-HyperV usage (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Validate XCR0 provided by guest in GHCB (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Read save fields from GHCB exactly once (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Rename kvm_ghcb_get_sw_exit_code() to kvm_get_cached_sw_exit_code() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Restrict GLOBAL_{CTRL,STATUS}, fixed PMCs, and PEBS to PMU v2+ (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Move initialization of valid PMCs bitmask to common x86 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Use BIT_ULL() instead of open coded equivalents (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Add helpers to toggle/change a bit in VMCS execution controls (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Use KVM_REQ_RECALC_INTERCEPTS to react to CPUID updates (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rework KVM_REQ_MSR_FILTER_CHANGED into a generic RECALC_INTERCEPTS (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Move PMU_CAP_{FW_WRITES,LBR_FMT} into msr-index.h header (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rename vmx_vmentry/vmexit_ctrl() helpers (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Snapshot host (i.e. perf's) reported PMU capabilities (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Check pmu->version, not enable_pmu, when getting PMC MSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Setup canonical VMCS config prior to kvm_x86_vendor_init() (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Add SEV-SNP CipherTextHiding support (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Introduce new min,max sev_es and sev_snp asid variables (Maxim Levitsky) [RHEL-151869]
+- KVM: nSVM: Replace kzalloc() + copy_from_user() with memdup_user() (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add support for DIV and IDIV in the fastops test (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Dedup the gnarly constraints of the fastops tests (more macros!) (Maxim Levitsky) [RHEL-151869]
+- KVM: selftests: Add coverage for 'b' (byte) sized fastops emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Enable Secure TSC for SNP guests (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Fold sev_es_vcpu_reset() into sev_vcpu_create() (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Set RESET GHCB MSR value during sev_es_init_vmcb() (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Move init of SNP guest state into sev_init_vmcb() (Maxim Levitsky) [RHEL-151869]
+- KVM: SVM: Move SEV-ES VMSA allocation to a dedicated sev_vcpu_create() helper (Maxim Levitsky) [RHEL-151869]
+- x86/cpufeatures: Add SNP Secure TSC (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Enforce minimum GHCB version requirement for SEV-SNP guests (Maxim Levitsky) [RHEL-151869]
+- KVM: SEV: Drop GHCB_VERSION_DEFAULT and open code it (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Zero XSTATE components on INIT by iterating over supported features (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Manually clear MPX state only on INIT (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add kvm_msr_{read,write}() helpers (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Use double-underscore read/write MSR helpers as appropriate (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rename kvm_{g,s}et_msr()* to show that they emulate guest accesses (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Advertise support for the immediate form of MSR instructions (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Support the immediate form of WRMSRNS in the VM-Exit fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add support for RDMSR/WRMSRNS w/ immediate on Intel (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rename handle_fastpath_set_msr_irqoff() to handle_fastpath_wrmsr() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Rename local "ecx" variables to "msr" and "pmc" as appropriate (Maxim Levitsky) [RHEL-151869]
+- x86/cpufeatures: Add a CPU feature bit for MSR immediate form instructions (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add a fastpath handler for INVD (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Push acquisition of SRCU in fastpath into kvm_pmu_trigger_event() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Rename check_pmu_event_filter() to pmc_is_event_allowed() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Drop redundant check on PMC being locally enabled for emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Drop redundant check on PMC being globally enabled for emulation (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Open code pmc_event_is_allowed() in its callers (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Rename pmc_speculative_in_use() to pmc_is_locally_enabled() (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Calculate set of to-be-emulated PMCs at time of WRMSRs (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Add wrappers for counting emulated instructions/branches (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/pmu: Move kvm_init_pmu_capability() to pmu.c (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Fold WRMSR fastpath helpers into the main handler (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Unconditionally grab data from EDX:EAX in WRMSR fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Acquire SRCU in WRMSR fastpath iff instruction needs to be skipped (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Unconditionally handle MSR_IA32_TSC_DEADLINE in fastpath exits (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Drop semi-arbitrary restrictions on IPI type in fastpath (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Only allow "fast" IPIs in fastpath WRMSR(X2APIC_ICR) handler (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Add kvm_icr_to_lapic_irq() helper to allow for fastpath IPIs (Maxim Levitsky) [RHEL-151869]
+- KVM: VMX: Add host MSR read/write helpers to consolidate preemption handling (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (Maxim Levitsky) [RHEL-151869]
+- KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Remove fastops (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Convert em_salc() to C (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_3WCL (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_1SRC2 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_2CL (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_2W (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_2R (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_2 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Introduce EM_ASM_1 (Maxim Levitsky) [RHEL-151869]
+- KVM: x86: Implement test_cc() in C (Maxim Levitsky) [RHEL-151869]
+- module: Rename EXPORT_SYMBOL_GPL_FOR_MODULES to EXPORT_SYMBOL_FOR_MODULES (Maxim Levitsky) [RHEL-151869]
+- net: aquantia: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
+- net/mlx5e: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
+- udp: gso: Use single MSS length in UDP header for GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
+
 * Wed Jul 29 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-253.el10]
 - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
 - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214083] {CVE-2026-64530}
diff --git a/sources b/sources
index 666d9a97d..5b4cfec21 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-253.el10.tar.xz) = c591cae2174bc74ade06202126bb35607b7478a3dc96a9f044375ce33d4325cd16f8512001b6c88a14dc808060fdaddc2c0a3a32fd6e29ea0044be756731d428
-SHA512 (kernel-abi-stablelists-6.12.0-253.el10.tar.xz) = 5e380cbb78f3d8cebf2ba77eb8ff68770bbac1c32c931a5442d75b9b52f21d94f5bdcc6b577ac884713528b8458ebf467a86ddc32a64aeeab36ebf9cdf87fdcf
-SHA512 (kernel-kabi-dw-6.12.0-253.el10.tar.xz) = 638b2290798338b50b1abd19618a202ca1ff4a20d6405253bf85da30a1912bf871349afdcf6cecf255573b3d3848c156922ad87b5e2e94c15e6d38afcb5748e9
+SHA512 (linux-6.12.0-254.el10.tar.xz) = 9ae7aee1cbf41ce0a7dad360145fdb5d5fc0969aef5cef545cfeadf5668c21846fa932a9e217f43c40655b674c7762f3044be3b41d68710d0ee4cbaa74af0d34
+SHA512 (kernel-abi-stablelists-6.12.0-254.el10.tar.xz) = 75d7b30c27a6c5e7a09bc583cf621fb459c4f66cf302adc0343e5eb0f45c8bc3a358b119e30c5f953185b7d9ee0b1c558b940c6d25b88eb81b861a4d6cc5f3ec
+SHA512 (kernel-kabi-dw-6.12.0-254.el10.tar.xz) = a21364ffd249e06b580134c7852bee9f40413fb1e061deb6d6b6ea8b832e1a9a9a25c1f4d1cc4113a2a15b141c92d727137dff9598358833102e6ea83a26aaf8