diff --git a/Makefile.rhelver b/Makefile.rhelver index 633a148cc..4dd714c76 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 3 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 238 +RHEL_RELEASE = 239 # # RHEL_REBASE_NUM diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config index 33ccf1837..6da81ecfc 100644 --- a/kernel-aarch64-64k-debug-rhel.config +++ b/kernel-aarch64-64k-debug-rhel.config @@ -4634,9 +4634,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4708,6 +4706,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5917,6 +5916,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config index c5acd38e3..3a464ff12 100644 --- a/kernel-aarch64-64k-rhel.config +++ b/kernel-aarch64-64k-rhel.config @@ -4613,9 +4613,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4687,6 +4685,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5893,6 +5892,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config index 587e7332e..a18e304bf 100644 --- a/kernel-aarch64-debug-rhel.config +++ b/kernel-aarch64-debug-rhel.config @@ -4631,9 +4631,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4705,6 +4703,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5913,6 +5912,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config index 86742cda8..32abd4f35 100644 --- a/kernel-aarch64-rhel.config +++ b/kernel-aarch64-rhel.config @@ -4610,9 +4610,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4684,6 +4682,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5889,6 +5888,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config index d517cb863..5bee13186 100644 --- a/kernel-aarch64-rt-64k-debug-rhel.config +++ b/kernel-aarch64-rt-64k-debug-rhel.config @@ -4675,9 +4675,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4749,6 +4747,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5964,6 +5963,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config index ded658bd3..840116a6c 100644 --- a/kernel-aarch64-rt-64k-rhel.config +++ b/kernel-aarch64-rt-64k-rhel.config @@ -4654,9 +4654,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4728,6 +4726,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5940,6 +5939,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config index 2e64c0937..0bbf9ddab 100644 --- a/kernel-aarch64-rt-debug-rhel.config +++ b/kernel-aarch64-rt-debug-rhel.config @@ -4672,9 +4672,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4746,6 +4744,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5960,6 +5959,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config index 5e337716f..ca302ff66 100644 --- a/kernel-aarch64-rt-rhel.config +++ b/kernel-aarch64-rt-rhel.config @@ -4651,9 +4651,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4725,6 +4723,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5936,6 +5935,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config index 7b0f8671e..b02cbc95c 100644 --- a/kernel-ppc64le-debug-rhel.config +++ b/kernel-ppc64le-debug-rhel.config @@ -4242,9 +4242,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4312,6 +4310,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5405,6 +5404,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config index e87368667..371cd7eb1 100644 --- a/kernel-ppc64le-rhel.config +++ b/kernel-ppc64le-rhel.config @@ -4222,9 +4222,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4292,6 +4290,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5383,6 +5382,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config index 746b316ab..464e5d0aa 100644 --- a/kernel-riscv64-debug-rhel.config +++ b/kernel-riscv64-debug-rhel.config @@ -4244,9 +4244,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4314,6 +4312,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5436,6 +5435,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-riscv64-rhel.config b/kernel-riscv64-rhel.config index 9f2ffce8a..ca7d6c937 100644 --- a/kernel-riscv64-rhel.config +++ b/kernel-riscv64-rhel.config @@ -4224,9 +4224,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4294,6 +4292,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5414,6 +5413,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_CGROUP is not set diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config index 1342f98f9..80718544e 100644 --- a/kernel-s390x-debug-rhel.config +++ b/kernel-s390x-debug-rhel.config @@ -4222,9 +4222,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4292,6 +4290,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5342,6 +5341,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set CONFIG_S390_GUEST=y CONFIG_S390_HYPFS_FS=y CONFIG_S390_HYPFS=y diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config index 7e1c2496f..d7e98667c 100644 --- a/kernel-s390x-rhel.config +++ b/kernel-s390x-rhel.config @@ -4202,9 +4202,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4272,6 +4270,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5320,6 +5319,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set CONFIG_S390_GUEST=y CONFIG_S390_HYPFS_FS=y CONFIG_S390_HYPFS=y diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config index 72bf6c9b5..be2f4e28f 100644 --- a/kernel-s390x-zfcpdump-rhel.config +++ b/kernel-s390x-zfcpdump-rhel.config @@ -4213,9 +4213,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4283,6 +4281,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5333,6 +5332,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_GUEST is not set # CONFIG_S390_HYPFS_FS is not set # CONFIG_S390_HYPFS is not set diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config index a5dad046f..c8ff26d02 100644 --- a/kernel-x86_64-debug-rhel.config +++ b/kernel-x86_64-debug-rhel.config @@ -4518,9 +4518,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4588,6 +4586,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5697,6 +5696,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_ANDROID_BINDERFS is not set diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config index 5cd916d4d..e64f50393 100644 --- a/kernel-x86_64-rhel.config +++ b/kernel-x86_64-rhel.config @@ -4498,9 +4498,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4568,6 +4566,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5674,6 +5673,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_ANDROID_BINDERFS is not set diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config index f89a2f2a0..e8aba76ba 100644 --- a/kernel-x86_64-rt-debug-rhel.config +++ b/kernel-x86_64-rt-debug-rhel.config @@ -4559,9 +4559,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4629,6 +4627,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5744,6 +5743,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_ANDROID_BINDERFS is not set diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config index 21a1b8708..110a82b5c 100644 --- a/kernel-x86_64-rt-rhel.config +++ b/kernel-x86_64-rt-rhel.config @@ -4539,9 +4539,7 @@ CONFIG_NF_CONNTRACK_ZONES=y CONFIG_NF_CT_NETLINK_HELPER=m CONFIG_NF_CT_NETLINK=m CONFIG_NF_CT_NETLINK_TIMEOUT=m -# CONFIG_NF_CT_PROTO_DCCP is not set CONFIG_NF_CT_PROTO_SCTP=y -CONFIG_NF_CT_PROTO_UDPLITE=y CONFIG_NF_DUP_NETDEV=m CONFIG_NF_FLOW_TABLE_INET=m CONFIG_NF_FLOW_TABLE_IPV4=m @@ -4609,6 +4607,7 @@ CONFIG_NFT_CT=m CONFIG_NFT_DUP_IPV4=m CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_DUP_NETDEV=m +# CONFIG_NFT_EXTHDR_DCCP is not set CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_IPV4=m CONFIG_NFT_FIB_IPV6=m @@ -5721,6 +5720,7 @@ CONFIG_RV=y CONFIG_RXGK=y CONFIG_RXKAD=y CONFIG_RXPERF=m +# CONFIG_RZ_DMAC is not set # CONFIG_S390_KPROBES_SANITY_TEST is not set # CONFIG_S390_MODULES_SANITY_TEST is not set # CONFIG_SAMPLE_ANDROID_BINDERFS is not set diff --git a/kernel.changelog b/kernel.changelog index ba4dbda0a..54aa1e0c7 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,807 @@ +* Mon Jun 15 2026 CKI KWF Bot [6.12.0-239.el10] +- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183464] +- io_uring: Fix KASAN UAF in io_kbuf_recycle_legacy (Jeff Moyer) [RHEL-183200] +- crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182119] +- crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182119] +- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182119] +- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182119] +- driver core: generalize driver_override in struct device (Mircea Dragan) [RHEL-113464] +- PCI: Initialize temporary device in new_id_store() (Mircea Dragan) [RHEL-113464] +- s390/ap: use generic driver_override infrastructure (Mircea Dragan) [RHEL-113464] +- s390/ap: Restrict driver_override versus apmask and aqmask use (Mircea Dragan) [RHEL-113464] +- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Mircea Dragan) [RHEL-113464] +- s390/ap: Support driver_override for AP queue devices (Mircea Dragan) [RHEL-113464] +- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Mircea Dragan) [RHEL-113464] +- redhat/configs: set NXP storage driver to built-in for boot speed (Ed Chong) [RHEL-181039] +- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180316] {CVE-2026-43260} +- objtool: Fix Clang jump table detection (Yannick Cote) [RHEL-152189] +- objtool/klp: fix mkstemp() failure with long paths (Yannick Cote) [RHEL-152189] +- objtool/klp: fix data alignment in __clone_symbol() (Yannick Cote) [RHEL-152189] +- objtool: Fix another stack overflow in validate_branch() (Yannick Cote) [RHEL-152189] +- objtool: Handle Clang RSP musical chairs (Yannick Cote) [RHEL-152189] +- objtool: Fix ERROR_INSN() error message (Yannick Cote) [RHEL-152189] +- objtool: Fix data alignment in elf_add_data() (Yannick Cote) [RHEL-152189] +- objtool: Use HOSTCFLAGS for HAVE_XXHASH test (Yannick Cote) [RHEL-152189] +- objtool/klp: Avoid NULL pointer dereference when printing code symbol name (Yannick Cote) [RHEL-152189] +- objtool/klp: Disable unsupported pr_debug() usage (Yannick Cote) [RHEL-152189] +- objtool/klp: Fix detection of corrupt static branch/call entries (Yannick Cote) [RHEL-152189] +- kbuild: Leave objtool binary around with 'make clean' (Yannick Cote) [RHEL-152189] +- kbuild: Add objtool to top-level clean target (Yannick Cote) [RHEL-152189] +- objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189] +- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Yannick Cote) [RHEL-152189] +- objtool/klp: Fix symbol correlation for orphaned local symbols (Yannick Cote) [RHEL-152189] +- objtool/klp: Fix bug table handling for __WARN_printf() (Yannick Cote) [RHEL-152189] +- objtool: Replace custom macros in elf.c with shared ones (Yannick Cote) [RHEL-152189] +- objtool: Print bfd_vma as unsigned long long on ia32-x86_64 cross build (Yannick Cote) [RHEL-152189] +- objtool: Fix libopcodes linking with static libraries (Yannick Cote) [RHEL-152189] +- kbuild: prefer ${NM} in check-function-names.sh (Yannick Cote) [RHEL-152189] +- objtool: fix build failure due to missing libopcodes check (Yannick Cote) [RHEL-152189] +- objtool: fix compilation failure with the x32 toolchain (Yannick Cote) [RHEL-152189] +- objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189] +- objtool: Add more robust signal error handling, detect and warn about stack overflows (Yannick Cote) [RHEL-152189] +- objtool: Fix stack overflow in validate_branch() (Yannick Cote) [RHEL-152189] +- objtool: Fix segfault on unknown alternatives (Yannick Cote) [RHEL-152189] +- objtool: Build with disassembly can fail when including bdf.h (Yannick Cote) [RHEL-152189] +- objtool: Trim trailing NOPs in alternative (Yannick Cote) [RHEL-152189] +- objtool: Add wide output for disassembly (Yannick Cote) [RHEL-152189] +- objtool: Compact output for alternatives with one instruction (Yannick Cote) [RHEL-152189] +- objtool: Improve naming of group alternatives (Yannick Cote) [RHEL-152189] +- objtool: Add Function to get the name of a CPU feature (Yannick Cote) [RHEL-152189] +- objtool: Provide access to feature and flags of group alternatives (Yannick Cote) [RHEL-152189] +- objtool: Fix address references in alternatives (Yannick Cote) [RHEL-152189] +- objtool: Disassemble jump table alternatives (Yannick Cote) [RHEL-152189] +- objtool: Disassemble exception table alternatives (Yannick Cote) [RHEL-152189] +- objtool: Print addresses with alternative instructions (Yannick Cote) [RHEL-152189] +- objtool: Disassemble group alternatives (Yannick Cote) [RHEL-152189] +- objtool: Print headers for alternatives (Yannick Cote) [RHEL-152189] +- objtool: Preserve alternatives order (Yannick Cote) [RHEL-152189] +- objtool: Add the --disas= action (Yannick Cote) [RHEL-152189] +- objtool: Do not validate IBT for .return_sites and .call_sites (Yannick Cote) [RHEL-152189] +- objtool: Improve tracing of alternative instructions (Yannick Cote) [RHEL-152189] +- objtool: Add functions to better name alternatives (Yannick Cote) [RHEL-152189] +- objtool: Identify the different types of alternatives (Yannick Cote) [RHEL-152189] +- objtool: Improve register reporting during function validation (Yannick Cote) [RHEL-152189] +- objtool: Trace instruction state changes during function validation (Yannick Cote) [RHEL-152189] +- objtool: Add option to trace function validation (Yannick Cote) [RHEL-152189] +- objtool: Record symbol name max length (Yannick Cote) [RHEL-152189] +- objtool: Extract code to validate instruction from the validate branch loop (Yannick Cote) [RHEL-152189] +- objtool: Disassemble instruction on warning or backtrace (Yannick Cote) [RHEL-152189] +- objtool: Store instruction disassembly result (Yannick Cote) [RHEL-152189] +- objtool: Print symbol during disassembly (Yannick Cote) [RHEL-152189] +- tool build: Remove annoying newline in build output (Yannick Cote) [RHEL-152189] +- objtool: Disassemble code with libopcodes instead of running objdump (Yannick Cote) [RHEL-152189] +- objtool: Create disassembly context (Yannick Cote) [RHEL-152189] +- objtool: Move disassembly functions to a separated file (Yannick Cote) [RHEL-152189] +- objtool: Remove second pass of .cold function correlation (Yannick Cote) [RHEL-152189] +- objtool: Skip non-canonical aliased symbols in add_jump_table_alts() (Yannick Cote) [RHEL-152189] +- objtool: Return canonical symbol when aliases exist in symbol finding helpers (Yannick Cote) [RHEL-152189] +- objtool: Don't alias undefined symbols (Yannick Cote) [RHEL-152189] +- objtool: Fix .cold function detection for duplicate symbols (Yannick Cote) [RHEL-152189] +- objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189] +- objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189] +- objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189] +- objtool/x86: Fix NOP decode (Yannick Cote) [RHEL-152189] +- objtool/x86: Add UDB support (Yannick Cote) [RHEL-152189] +- objtool/LoongArch: Mark special atomic instruction as INSN_BUG type (Yannick Cote) [RHEL-152189] +- objtool/LoongArch: Mark types based on break immediate code (Yannick Cote) [RHEL-152189] +- livepatch/klp-build: Fix inconsistent kernel version (Yannick Cote) [RHEL-152193] +- livepatch: Free klp_{object,func}_ext data after initialization (Yannick Cote) [RHEL-152193] +- livepatch: Fix having __klp_objects relics in non-livepatch modules (Yannick Cote) [RHEL-152193] +- livepatch/klp-build: Require Clang assembler >= 20 (Yannick Cote) [RHEL-152193] +- livepatch/klp-build: Fix klp-build vs CONFIG_MODULE_SRCVERSION_ALL (Yannick Cote) [RHEL-152193] +- selftests: livepatch: use canonical ftrace path (Yannick Cote) [RHEL-152193] +- livepatch: Match old_sympos 0 and 1 in klp_find_func() (Yannick Cote) [RHEL-152193] +- netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-168848] +- netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [RHEL-168848] +- netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-168848] +- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-168848] +- netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-168848] +- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-168848] +- netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-168848] +- netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-168848] +- netfilter: ipset: Fix data race between add and list header in all hash types (Florian Westphal) [RHEL-168848] +- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-168848] +- netfilter: nft_inner: release local_lock before re-enabling softirqs (Florian Westphal) [RHEL-168848] +- netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-168848] +- netfilter: nft_inner: Fix IPv6 inner_thoff desync (Florian Westphal) [RHEL-168848] +- netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-168848] +- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-168848] +- netfilter: bridge: eb_tables: close module init race (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: close dangling table module init race (Florian Westphal) [RHEL-168848] +- netfilter: ebtables: close dangling table module init race (Florian Westphal) [RHEL-168848] +- netfilter: ebtables: move to two-stage removal scheme (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: add and use xtables_unregister_table_exit (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: unregister the templates first (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: add and use xt_unregister_table_pre_exit (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: allocate hook ops while under mutex (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: allow initial table replace without emitting audit log message (Florian Westphal) [RHEL-168848] +- ipvs: do not leak dest after get from dest trash (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: fix inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: fix inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: ensure sufficient headroom in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: xtables: fix L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: skip L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848] +- netfilter: nf_socket: skip socket lookup for non-first fragments (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-168848] +- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-168848] +- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-168848] +- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-168848] +- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-168848] +- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-168848] +- netfilter: skip recording stale or retransmitted INIT (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-168848] +- netfilter: reject zero shift in nft_bitwise (Florian Westphal) [RHEL-168848] +- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-168848] +- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-168848] +- netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-168848] +- ipvs: fix MTU check for GSO packets in tunnel mode (Florian Westphal) [RHEL-168848] +- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-168848] +- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-168848] +- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_tproxy.sh: adjust to socat changes (Florian Westphal) [RHEL-168848] +- netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-168848] +- netfilter: ip6t_eui64: reject invalid MAC header for all packets (Florian Westphal) [RHEL-168848] +- netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: remove UDP-Lite conntrack support (Florian Westphal) [RHEL-168848] +- netfilter: xt_socket: enable defrag after all other checks (Florian Westphal) [RHEL-168848] +- netfilter: xt_HL: add pr_fmt and checkentry validation (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink: prefer skb_mac_header helpers (Florian Westphal) [RHEL-168848] +- netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-168848] +- selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-168848] +- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-168848] +- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-168848] +- ipvs: fix NULL deref in ip_vs_add_service error path (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined (Florian Westphal) [RHEL-168848] +- netfilter: nft_meta: add double-tagged vlan and pppoe support (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: add netlink policy based cap on registers (Florian Westphal) [RHEL-168848] +- netfilter: add more netlink-based policy range checks (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: remove unreliable debug code in decode_octstr (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Fix typo in enum description (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-168848] +- netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_helper: pass helper to expect cleanup (Florian Westphal) [RHEL-168848] +- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: revisit array resize logic (Florian Westphal) [RHEL-168848] +- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-168848] +- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-168848] +- netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-168848] +- netfilter: xt_time: use unsigned int for monthday bit shift (Florian Westphal) [RHEL-168848] +- netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-168848] +- netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-168848] +- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-168848] +- netfilter: nf_flow_table_ip: reset mac header before vlan push (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-168848] +- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Fix for duplicate device in netdev hooks (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: remove locking in nfqnl_get_sk_secctx (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: remove register tracking infrastructure (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: drop obsolete EXPORT_SYMBOLs (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: don't disable bh when acquiring tree lock (Florian Westphal) [RHEL-168848] +- ipvs: do not keep dest_dst after dest is removed (Florian Westphal) [RHEL-168848] +- ipvs: do not keep dest_dst if dev is going down (Florian Westphal) [RHEL-168848] +- ipvs: skip ipv6 extension headers for csum checks (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: revert commit_mutex usage in reset path (Florian Westphal) [RHEL-168848] +- netfilter: nft_quota: use atomic64_xchg for reset (Florian Westphal) [RHEL-168848] +- netfilter: nft_counter: serialize reset with spinlock (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: validate element belonging to interval (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Florian Westphal) [RHEL-168848] +- netfilter: nft_counter: fix reset of counters on 32bit archs (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-168848] +- selftests: netfilter: add IPV6_TUNNEL to config (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: dedicated slab for flow entry (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_queue.sh: add udp fraglist gro test case (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: don't gc elements on insert (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-168848] +- netfilter: xt_time: use is_leap_year() helper (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: Add IP6IP6 tx sw acceleration (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: Add IP6IP6 rx sw acceleration (Florian Westphal) [RHEL-168848] +- netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct (Florian Westphal) [RHEL-168848] +- netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto signature (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: remove seqcount_rwlock_t (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: use binary search array in get command (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: translate rbtree to array for binary search (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: add .abort_skip_removal flag for set types (Florian Westphal) [RHEL-168848] +- netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-168848] +- netfilter: nf_conncount: fix tracking of connections from localhost (Florian Westphal) [RHEL-168848] +- netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-168848] +- netfilter: don't include xt and nftables.h in unrelated subsystems (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack: enable icmp clash support (Florian Westphal) [RHEL-168848] +- netfilter: nf_conncount: increase the connection clean up limit to 64 (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: reset table validation state on abort (Florian Westphal) [RHEL-168848] +- netfilter: replace -EEXIST with -EBUSY (Florian Westphal) [RHEL-168848] +- netfilter: nft_synproxy: avoid possible data-race on update operation (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: fix range overlap detection (Florian Westphal) [RHEL-168848] +- audit: add audit_log_nf_skb helper function (Florian Westphal) [RHEL-168848] +- selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal) [RHEL-168848] +- selftests: netfilter: prefer xfail in case race wasn't triggered (Florian Westphal) [RHEL-168848] +- netfilter: always set route tuple out ifindex (Florian Westphal) [RHEL-168848] +- netfilter: nf_conncount: fix leaked ct in error paths (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: improve UAPI kernel-doc comments (Florian Westphal) [RHEL-168848] +- netfilter: ip6t_srh: fix UAPI kernel-doc comments format (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic (Florian Westphal) [RHEL-168848] +- netfilter: nft_connlimit: add support to object update operation (Florian Westphal) [RHEL-168848] +- netfilter: nft_connlimit: update the count if add was skipped (Florian Westphal) [RHEL-168848] +- netfilter: nf_conncount: rework API to use sk_buff directly (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: Add IPIP tx sw acceleration (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: Add IPIP rx sw acceleration (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: use tuple address to calculate next hop (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: remove hw_ifidx (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: consolidate xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: move path discovery infrastructure to its own file (Florian Westphal) [RHEL-168848] +- netfilter: fix typo in nf_conntrack_l4proto.h comment (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: disable 0 value for conntrack_max setting (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-168848] +- selftests: netfilter: query conntrack state to check for port clash resolution (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_fib.sh: fix spurious test failures (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-168848] +- netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal) [RHEL-168848] +- netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support (Florian Westphal) [RHEL-168848] +- netfilter: ipset: Remove unused htable_bits in macro ahash_region (Florian Westphal) [RHEL-168848] +- selftests: netfilter: fix udpclash tool hang (Florian Westphal) [RHEL-168848] +- netfilter: nft_payload: extend offset to 65535 bytes (Florian Westphal) [RHEL-168848] +- netfilter: nf_reject: remove unneeded exports (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: remove redundant test for avx feature bit (Florian Westphal) [RHEL-168848] +- netfilter: nft_payload: Use csum_replace4() instead of opencoding (Florian Westphal) [RHEL-168848] +- netfilter: ebtables: Use vmalloc_array() to improve code (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: use avx2 algorithm for insertions too (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: remove refcounting in dying list dumping (Florian Westphal) [RHEL-168848] +- selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Remove unused nft_reduce_is_readonly() (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: Remove unused functions xt_{in|out}name() (Florian Westphal) [RHEL-168848] +- selftests: netfilter: tone-down conntrack clash test (Florian Westphal) [RHEL-168848] +- selftests: netfilter: conntrack_resize.sh: also use udpclash tool (Florian Westphal) [RHEL-168848] +- selftests: netfilter: add conntrack clash resolution test case (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Reintroduce shortened deletion notifications (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Drop dead code from fill_*_info routines (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: remove DCCP protocol support (Florian Westphal) [RHEL-168848] +- netfilter: nf_dup_netdev: Move the recursion counter struct netdev_xmit (Florian Westphal) [RHEL-168848] +- netfilter: nf_dup{4, 6}: Move duplication check to task_struct (Florian Westphal) [RHEL-168848] +- netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: Remove redundant NFCT_ALIGN call (Florian Westphal) [RHEL-168848] +- netfilter: xt_cgroup: Make it independent from net_cls (Florian Westphal) [RHEL-168848] +- netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies() (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINE (Florian Westphal) [RHEL-168848] +- netfilter: xtables: Use strscpy() instead of strscpy_pad() (Florian Westphal) [RHEL-168848] +- netfilter: xt_hashlimit: replace vmalloc calls with kvmalloc (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: cleanup timeout definitions (Florian Westphal) [RHEL-168848] +- netfilter: bitwise: add support for doing AND, OR and XOR directly (Florian Westphal) [RHEL-168848] +- netfilter: bitwise: rename some boolean operation functions (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: replace deprecated strncpy with strscpy_pad (Florian Westphal) [RHEL-168848] +- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175537] {CVE-2026-31474} +- dmaengine: dw-edma: Add non-LL mode (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Add AMD MDB Endpoint Support (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Add device_{pause,resume}() callbacks (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Add device_tx_status() callback (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Use rz_lmdesc_setup() to invalidate descriptors (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Drop unnecessary local_irq_save() call (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Drop goto instruction and label (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Drop read of CHCTRL register (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz_dmac: add RZ/{T2H,N2H} support (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz_dmac: make register_dma_req() chip-specific (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz_dmac: make error interrupt optional (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Add virtual IRQ for interrupt-emulation doorbells (Eder Zulian) [RHEL-172442] +- dmaengine: dw_edma: correct kernel-doc warnings in (Eder Zulian) [RHEL-172442] +- New configs in drivers/dma (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Add interrupt-emulation hooks (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: fix MSI data programming for multi-IRQ case (Eder Zulian) [RHEL-172442] +- dmaengine: sh: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: bam_dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: adm: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442] +- dmaengine: bcm2835-dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154485 RHEL-172442] +- dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154485 RHEL-172442] +- dmaengine: sh: rz-dmac: Make channel irq local (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: uapi: use UAPI types (Eder Zulian) [RHEL-172442] +- dmaengine: sh: Discard pm_runtime_put() return value (Eder Zulian) [RHEL-172442] +- dmaengine: ti: Remove redundant pm_runtime_mark_last_busy() calls (Eder Zulian) [RHEL-172442] +- dmaengine: ti: k3-udma: enable compile testing (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: bam_dma: use lock guards (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: bam_dma: order includes alphabetically (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Fix confusing cleanup.h syntax (Eder Zulian) [RHEL-172442] +- dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172442] +- dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172442] +- dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172442] +- dmaengine: ti: dma-crossbar: clean up dra7x route allocation error paths (Eder Zulian) [RHEL-172442] +- dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172442] +- dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172442] +- dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Eder Zulian) [RHEL-172442] +- dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172442] +- dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172442] +- dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172442] +- dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172442] +- dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442] +- dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172442] +- dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172442] +- dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172442] +- dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172442] +- dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172442] +- ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-137412] +- ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-137412] +- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-137412] +- ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-137412] +- ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-137412] +- ice: add dpll peer notification for paired SMA and U.FL pins (Michal Schmidt) [RHEL-137412] +- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-137412] +- ice: fix missing dpll notifications for SW pins (Michal Schmidt) [RHEL-137412] +- ice: fix SMA and U.FL pin state changes affecting paired pin (Michal Schmidt) [RHEL-137412] +- ice: fix missing SMA pin initialization in DPLL subsystem (Michal Schmidt) [RHEL-137412] +- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Michal Schmidt) [RHEL-137412] +- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Michal Schmidt) [RHEL-137412] +- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Michal Schmidt) [RHEL-137412] +- ice: fix ready bitmap check for non-E822 devices (Michal Schmidt) [RHEL-137412] +- ice: perform PHY soft reset for E825C ports at initialization (Michal Schmidt) [RHEL-137412] +- ice: fix timestamp interrupt configuration for E825C (Michal Schmidt) [RHEL-137412] +- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-137412] +- ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-137412] +- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-137412] +- ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-137412] +- ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-137412] +- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [ice] (Michal Schmidt) [RHEL-137412] +- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [ice] (Michal Schmidt) [RHEL-137412] +- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [ice] (Michal Schmidt) [RHEL-137412] +- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [ice] (Michal Schmidt) [RHEL-137412] +- ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-137412] +- ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-137412] +- ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-137412] +- ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-137412] +- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-137412] +- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Michal Schmidt) [RHEL-137412] +- ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-137412] +- ice: fix PTP timestamping broken by SyncE code on E825C (Michal Schmidt) [RHEL-137412] +- ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-137412] +- ice: use ice_update_eth_stats() for representor stats (Michal Schmidt) [RHEL-137412] +- ice: fix inverted ready check for VF representors (Michal Schmidt) [RHEL-137412] +- drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-137412] +- ice: fix rxq info registering in mbuf packets (Michal Schmidt) [RHEL-137412] +- ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-137412] +- ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-137412] +- ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-137412] +- ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-137412] +- ice: fix missing TX timestamps interrupts on E825 devices (Michal Schmidt) [RHEL-137412] +- ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-137412] +- ice: reshuffle and group Rx and Tx queue fields by cachelines (Michal Schmidt) [RHEL-137412] +- ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-137412] +- ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-137412] +- ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-137412] +- ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-137412] +- ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-137412] +- ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-137412] +- rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171746] +- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171457] {CVE-2026-31636} +- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171437] {CVE-2026-31607} +- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171420] {CVE-2026-31641} +- vxlan: validate ND option lengths in vxlan_na_create (Guillaume Nault) [RHEL-152728] +- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-152728] +- udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Guillaume Nault) [RHEL-152728] +- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Guillaume Nault) [RHEL-152728] +- ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152728] +- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152728] +- ipv4: ip_tunnel: spread netdev_lockdep_set_classes() (Guillaume Nault) [RHEL-152728] +- arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152728] +- erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152728] +- ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152728] +- selftest: packetdrill: add tcp_timestamping_tcp_tx_timestamp_bug.pkt (Paolo Abeni) [RHEL-152718] +- tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152718] +- net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152718] +- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-152718] +- tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152718] +- tcp: fix tcp_tso_should_defer() vs large RTT (Paolo Abeni) [RHEL-152718] +- tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() (Paolo Abeni) [RHEL-152718] +- net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Paolo Abeni) [RHEL-152718] +- wireguard: send: append trailer after expanding head (Toke Høiland-Jørgensen) [RHEL-152735] +- wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit (Toke Høiland-Jørgensen) [RHEL-152735] {CVE-2026-31579} +- wireguard: allowedips: remove redundant space (Toke Høiland-Jørgensen) [RHEL-152735] +- wireguard: allowedips: Use kfree_rcu() instead of call_rcu() (Toke Høiland-Jørgensen) [RHEL-152735] +- wireguard: netlink: generate netlink code (CKI Backport Bot) [RHEL-152735] +- wireguard: uapi: generate header with ynl-gen (CKI Backport Bot) [RHEL-152735] +- wireguard: uapi: move flag enums (CKI Backport Bot) [RHEL-152735] +- wireguard: uapi: move enum wg_cmd (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: add YNL specification (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: lower .maxattr for WG_CMD_GET_DEVICE (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: convert to split ops (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: use WG_KEY_LEN in policies (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: validate nested arrays in policy (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: enable strict genetlink validation (CKI Backport Bot) [RHEL-152735] +- wireguard: queueing: always return valid online CPU in wg_cpumask_choose_online() (CKI Backport Bot) [RHEL-152735] +- wireguard: queueing: simplify wg_cpumask_next_online() (CKI Backport Bot) [RHEL-152735] +- wireguard: peer: Replace sockaddr with sockaddr_inet (CKI Backport Bot) [RHEL-152735] +- ipv6: Add sockaddr_inet unified address structure (CKI Backport Bot) [RHEL-152735] +- clocksource/drivers/arm_arch_timer_mmio: Prevent driver unbind (Mark Langsdorf) [RHEL-156420] +- ACPI: GTDT: Get rid of acpi_arch_timer_mem_init() (Mark Langsdorf) [RHEL-156420] +- clocksource/drivers/arm_arch_timer_mmio: Switch over to standalone driver (Mark Langsdorf) [RHEL-156420] +- clocksource/drivers/arm_arch_timer: Add standalone MMIO driver (Mark Langsdorf) [RHEL-156420] +- ACPI: tools: pfrut: fix memory leak and resource leak in pfrut.c (Mark Langsdorf) [RHEL-156420] +- ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420] +- ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420] +- ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156420] +- ACPI: video: Move Lenovo Legion S7 15ACH6 quirk to the right section (Mark Langsdorf) [RHEL-156420] +- ACPI: RIMT: Add dependency between iommu and devices (Mark Langsdorf) [RHEL-156420] +- genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156420] +- drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156420] +- ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156420] +- ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156420] +- ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156420] +- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156420] +- ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156420] +- ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156420] +- ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156420] +- hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156420] +- hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156420] +- ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156420] +- ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156420] +- ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156420] +- ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420] +- ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156420] +- ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156420] +- x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156420] +- ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156420] +- ACPICA: actbl2.h: ACPI 6.6: RAS2: Update Parameter Block structure (Mark Langsdorf) [RHEL-156420] +- ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156420] +- ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156420] +- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156420] +- ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156420] +- ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156420] +- ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156420] +- ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156420] +- ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156420] +- APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Rearrange declarations in header file (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156420] +- ACPI: acpi_watchdog: use LIST_HEAD for stack-allocated list (Mark Langsdorf) [RHEL-156420] +- ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156420] +- ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156420] +- ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156420] +- ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156420] +- ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156420] +- ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156420] +- wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156420] +- ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156420] +- ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156420] +- ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156420] +- ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156420] +- ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156420] +- x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156420] +- acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156420] +- vmcoreinfo: make hwerr_data visible for debugging (Mark Langsdorf) [RHEL-156420] +- vmcoreinfo: track and log recoverable hardware errors (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420] +- ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420] +- ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156420] +- ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156420] +- ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-156420] +- acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156420] +- acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156420] +- ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156420] +- ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156420] +- ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420] +- ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420] +- ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156420] +- ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156420] +- ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156420] +- ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156420] +- ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156420] +- ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156420] +- ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156420] +- ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156420] +- ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156420] +- ACPI: RIMT: Fix unused function warnings when CONFIG_IOMMU_API is disabled (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156420] +- ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156420] +- cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156420] +- cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156420] +- ACPI: support BGRT table on RISC-V (Mark Langsdorf) [RHEL-156420] +- ACPI: RISC-V: Add RPMI System MSI to GSI mapping (Mark Langsdorf) [RHEL-156420] +- ACPI: RISC-V: Add support to update gsi range (Mark Langsdorf) [RHEL-156420] +- ACPI: RISC-V: Create interrupt controller list in sorted order (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Update honor list for RPMI System MSI (Mark Langsdorf) [RHEL-156420] +- ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156420] +- ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156420] +- x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156420] +- ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156420] +- ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156420] +- ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156420] +- ACPI: SPCR: Add support for DBG2 RISC-V SBI port subtype (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156420] +- ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156420] +- ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156420] +- ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156420] +- ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156420] +- ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156420] +- ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156420] +- ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156420] +- ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Add support for RISC-V in acpi_iommu_configure_id() (Mark Langsdorf) [RHEL-156420] +- ACPI: RISC-V: Add support for RIMT (Mark Langsdorf) [RHEL-156420] +- ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156420] +- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156420] +- ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156420] +- ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156420] +- ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156420] +- ACPI: video: force native for Lenovo 82K8 (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156420] +- irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156420] +- redhat/configs: automotive: enable NXP_SAR_ADC as a module (Jared Kangas) [RHEL-156761] +- iio: adc: nxp-sar-adc: Avoid division by zero (Jared Kangas) [RHEL-156761] +- iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Jared Kangas) [RHEL-156761] +- iio: adc: nxp-sar-adc: fix division by zero in write_raw (Jared Kangas) [RHEL-156761] +- iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Jared Kangas) [RHEL-156761] +- iio: buffer: Fix wait_queue not being removed (Jared Kangas) [RHEL-156761] +- iio: buffer: buffer_impl.h: fix kernel-doc warnings (Jared Kangas) [RHEL-156761] +- iio: core: Add cleanup.h support for iio_device_claim_*() (Jared Kangas) [RHEL-156761] +- iio: core: Refactor iio_device_claim_direct() implementation (Jared Kangas) [RHEL-156761] +- iio: core: Add and export __iio_dev_mode_lock() (Jared Kangas) [RHEL-156761] +- iio: core: Constify struct configfs_item_operations and configfs_group_operations (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: Fix coding style complains (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: Use the cleanup.h API (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Fix coding style complains (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Turn iio_dma_buffer_init() void (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Use the cleanup.h API (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Use lockdep for locking annotations (Jared Kangas) [RHEL-156761] +- iio: core: add separate lockdep class for info_exist_lock (Jared Kangas) [RHEL-156761] +- iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Jared Kangas) [RHEL-156761] +- dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Jared Kangas) [RHEL-156761] +- iio: buffer: use dma_buf_unmap_attachment_unlocked() helper (Jared Kangas) [RHEL-156761] +- iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Jared Kangas) [RHEL-156761] +- iio: core: Clean up device correctly on iio_device_alloc() failure (Jared Kangas) [RHEL-156761] +- iio: core: add missing mutex_destroy in iio_dev_release() (Jared Kangas) [RHEL-156761] +- iio: backend: fix kernel-doc to avoid warnings and ensure consistency (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: enable .get_dma_dev() (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: support getting the DMA channel (Jared Kangas) [RHEL-156761] +- iio: buffer: support getting dma channel from the buffer (Jared Kangas) [RHEL-156761] +- iio: buffer: document that buffer callback must be context safe (Jared Kangas) [RHEL-156761] +- iio: buffer: document store_to() callback may be called in any context (Jared Kangas) [RHEL-156761] +- iio: buffer: document iio_push_to_buffers() calling context (Jared Kangas) [RHEL-156761] +- iio: buffer: iio_push_to_buffers_with_ts_unaligned() might_sleep() (Jared Kangas) [RHEL-156761] +- iio: buffer: document iio_push_to_buffers_with_ts_unaligned() may sleep (Jared Kangas) [RHEL-156761] +- iio: add IIO_ALTCURRENT channel type (Jared Kangas) [RHEL-156761] +- iio: core: switch info_mask fields to unsigned long to match find_bit helpers (Jared Kangas) [RHEL-156761] +- iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Jared Kangas) [RHEL-156761] +- iio: buffer: buffer-cb: drop double initialization of demux list (Jared Kangas) [RHEL-156761] +- iio: fix iio_push_to_buffers_with_ts() typo (Jared Kangas) [RHEL-156761] +- iio: trigger: stm32-lptimer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761] +- iio: trigger: stm32-timer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761] +- iio: adc: stm32-dfsdm: Fix build warnings about export.h (Jared Kangas) [RHEL-156761] +- iio: core: add ADC delay calibration definition (Jared Kangas) [RHEL-156761] +- iio: buffer: Fix checkpatch.pl warning (Jared Kangas) [RHEL-156761] +- iio: backend: add support for number of lanes (Jared Kangas) [RHEL-156761] +- iio: backend: add support for data alignment (Jared Kangas) [RHEL-156761] +- iio: backend: add support for filter config (Jared Kangas) [RHEL-156761] +- iio: fix potential out-of-bound write (Jared Kangas) [RHEL-156761] +- iio: backend: fix out-of-bound write (Jared Kangas) [RHEL-156761] +- iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Jared Kangas) [RHEL-156761] +- iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Jared Kangas) [RHEL-156761] +- iio: backend: add support for data source get (Jared Kangas) [RHEL-156761] +- iio: Adjust internals of handling of direct mode claiming to suit new API. (Jared Kangas) [RHEL-156761] +- iio: core: Add support for writing 64 bit attrs (Jared Kangas) [RHEL-156761] +- MAINTAINERS: Add IIO ADC helpers (Jared Kangas) [RHEL-156761] +- iio: adc: add helpers for parsing ADC nodes (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Fix docstrings (Jared Kangas) [RHEL-156761] +- iio: core: make use of simple_write_to_buffer() (Jared Kangas) [RHEL-156761] +- iio: backend: make sure to NULL terminate stack buffer (Jared Kangas) [RHEL-156761] +- iio: backend: add API for oversampling (Jared Kangas) [RHEL-156761] +- iio: backend: add support for data size set (Jared Kangas) [RHEL-156761] +- iio: backend: add API for interface get (Jared Kangas) [RHEL-156761] +- iio: core: Rework claim and release of direct mode to work with sparse. (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: add devm_iio_dmaengine_buffer_setup_with_handle() (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: split requesting DMA channel from allocating buffer (Jared Kangas) [RHEL-156761] +- iio: gts-helper: export iio_gts_get_total_gain() (Jared Kangas) [RHEL-156761] +- iio: introduce the FAULT event type (Jared Kangas) [RHEL-156761] +- iio: gts-helper: add helpers to ease searches of gain_sel and new_gain (Jared Kangas) [RHEL-156761] +- iio: gts: Simplify available scale table build (Jared Kangas) [RHEL-156761] +- iio: consumers: ensure read buffers for labels and ext_info are page aligned (Jared Kangas) [RHEL-156761] +- iio: core: fix doc reference to iio_push_to_buffers_with_ts_unaligned (Jared Kangas) [RHEL-156761] +- iio: trigger: stm32-timer-trigger: Add check for clk_enable() (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: document iio_dmaengine_buffer_setup_ext (Jared Kangas) [RHEL-156761] +- iio: Move __private marking before struct element priv in struct iio_dev (Jared Kangas) [RHEL-156761] +- iio: events: make IIO_EVENT_CODE macro private (Jared Kangas) [RHEL-156761] +- iio: Mark iio_dev::priv member with __private (Jared Kangas) [RHEL-156761] +- iio: Add channel type for attention (Jared Kangas) [RHEL-156761] +- iio: gts: fix infinite loop for gain_to_scaletables() (Jared Kangas) [RHEL-156761] +- iio: gts: Fix uninitialized symbol 'ret' (Jared Kangas) [RHEL-156761] +- iio: backend: extend features (Jared Kangas) [RHEL-156761] +- iio: events.h: add event identifier macros for differential channel (Jared Kangas) [RHEL-156761] +- iio: backend: fix wrong pointer passed to IS_ERR() (Jared Kangas) [RHEL-156761] +- iio: Convert unsigned to unsigned int (Jared Kangas) [RHEL-156761] +- iio: adc: Convert to IIO_MAP() (Jared Kangas) [RHEL-156761] +- iio: adc: Constify struct iio_map (Jared Kangas) [RHEL-156761] +- netdev: add io_uring memory provider info (Davide Caratti) [RHEL-141853] +- net: add helpers for setting a memory provider on an rx queue (Davide Caratti) [RHEL-141853] +- net: page_pool: add memory provider helpers (Davide Caratti) [RHEL-141853] +- net: prepare for non devmem TCP memory providers (Davide Caratti) [RHEL-141853] +- net: page_pool: add a mp hook to unregister_netdevice* (Davide Caratti) [RHEL-141853] +- net: page_pool: add callback for mp info printing (Davide Caratti) [RHEL-141853] +- net: page_pool: create hooks for custom memory providers (Davide Caratti) [RHEL-141853] +- net: generalise net_iov chunk owners (Davide Caratti) [RHEL-141853] +- net: prefix devmem specific helpers (Davide Caratti) [RHEL-141853] +- net: page_pool: don't cast mp param to devmem (Davide Caratti) [RHEL-141853] +- selftests: drv-net-hw: inject pp_alloc_fail errors in the right place (Davide Caratti) [RHEL-141853] +- net: page_pool: rename page_pool_is_last_ref() (Davide Caratti) [RHEL-141853] +- net: page_pool: do not count normal frag allocation in stats (Davide Caratti) [RHEL-141853] +Resolves: RHEL-113464, RHEL-137412, RHEL-141853, RHEL-152189, RHEL-152193, RHEL-152718, RHEL-152728, RHEL-152735, RHEL-154485, RHEL-156420, RHEL-156761, RHEL-168848, RHEL-171420, RHEL-171437, RHEL-171457, RHEL-171746, RHEL-172442, RHEL-175537, RHEL-180316, RHEL-181039, RHEL-182119, RHEL-183200, RHEL-183464 + * Wed Jun 10 2026 CKI KWF Bot [6.12.0-238.el10] - redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov) - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (Mamatha Inamdar) [RHEL-174883] diff --git a/kernel.spec b/kernel.spec index cad940853..df95262da 100644 --- a/kernel.spec +++ b/kernel.spec @@ -179,15 +179,15 @@ Summary: The Linux kernel %define specrpmversion 6.12.0 %define specversion 6.12.0 %define patchversion 6.12 -%define pkgrelease 238 +%define pkgrelease 239 %define kversion 6 -%define tarfile_release 6.12.0-238.el10 +%define tarfile_release 6.12.0-239.el10 # This is needed to do merge window version magic %define patchlevel 12 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 238%{?buildid}%{?dist} +%define specrelease 239%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 6.12.0-238.el10 +%define kabiversion 6.12.0-239.el10 # If this variable is set to 1, a bpf selftests build failure will cause a # fatal kernel package build error @@ -4550,6 +4550,809 @@ fi\ # # %changelog +* Mon Jun 15 2026 CKI KWF Bot [6.12.0-239.el10] +- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183464] +- io_uring: Fix KASAN UAF in io_kbuf_recycle_legacy (Jeff Moyer) [RHEL-183200] +- crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182119] +- crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182119] +- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182119] +- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182119] +- driver core: generalize driver_override in struct device (Mircea Dragan) [RHEL-113464] +- PCI: Initialize temporary device in new_id_store() (Mircea Dragan) [RHEL-113464] +- s390/ap: use generic driver_override infrastructure (Mircea Dragan) [RHEL-113464] +- s390/ap: Restrict driver_override versus apmask and aqmask use (Mircea Dragan) [RHEL-113464] +- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Mircea Dragan) [RHEL-113464] +- s390/ap: Support driver_override for AP queue devices (Mircea Dragan) [RHEL-113464] +- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Mircea Dragan) [RHEL-113464] +- redhat/configs: set NXP storage driver to built-in for boot speed (Ed Chong) [RHEL-181039] +- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180316] {CVE-2026-43260} +- objtool: Fix Clang jump table detection (Yannick Cote) [RHEL-152189] +- objtool/klp: fix mkstemp() failure with long paths (Yannick Cote) [RHEL-152189] +- objtool/klp: fix data alignment in __clone_symbol() (Yannick Cote) [RHEL-152189] +- objtool: Fix another stack overflow in validate_branch() (Yannick Cote) [RHEL-152189] +- objtool: Handle Clang RSP musical chairs (Yannick Cote) [RHEL-152189] +- objtool: Fix ERROR_INSN() error message (Yannick Cote) [RHEL-152189] +- objtool: Fix data alignment in elf_add_data() (Yannick Cote) [RHEL-152189] +- objtool: Use HOSTCFLAGS for HAVE_XXHASH test (Yannick Cote) [RHEL-152189] +- objtool/klp: Avoid NULL pointer dereference when printing code symbol name (Yannick Cote) [RHEL-152189] +- objtool/klp: Disable unsupported pr_debug() usage (Yannick Cote) [RHEL-152189] +- objtool/klp: Fix detection of corrupt static branch/call entries (Yannick Cote) [RHEL-152189] +- kbuild: Leave objtool binary around with 'make clean' (Yannick Cote) [RHEL-152189] +- kbuild: Add objtool to top-level clean target (Yannick Cote) [RHEL-152189] +- objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189] +- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Yannick Cote) [RHEL-152189] +- objtool/klp: Fix symbol correlation for orphaned local symbols (Yannick Cote) [RHEL-152189] +- objtool/klp: Fix bug table handling for __WARN_printf() (Yannick Cote) [RHEL-152189] +- objtool: Replace custom macros in elf.c with shared ones (Yannick Cote) [RHEL-152189] +- objtool: Print bfd_vma as unsigned long long on ia32-x86_64 cross build (Yannick Cote) [RHEL-152189] +- objtool: Fix libopcodes linking with static libraries (Yannick Cote) [RHEL-152189] +- kbuild: prefer ${NM} in check-function-names.sh (Yannick Cote) [RHEL-152189] +- objtool: fix build failure due to missing libopcodes check (Yannick Cote) [RHEL-152189] +- objtool: fix compilation failure with the x32 toolchain (Yannick Cote) [RHEL-152189] +- objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189] +- objtool: Add more robust signal error handling, detect and warn about stack overflows (Yannick Cote) [RHEL-152189] +- objtool: Fix stack overflow in validate_branch() (Yannick Cote) [RHEL-152189] +- objtool: Fix segfault on unknown alternatives (Yannick Cote) [RHEL-152189] +- objtool: Build with disassembly can fail when including bdf.h (Yannick Cote) [RHEL-152189] +- objtool: Trim trailing NOPs in alternative (Yannick Cote) [RHEL-152189] +- objtool: Add wide output for disassembly (Yannick Cote) [RHEL-152189] +- objtool: Compact output for alternatives with one instruction (Yannick Cote) [RHEL-152189] +- objtool: Improve naming of group alternatives (Yannick Cote) [RHEL-152189] +- objtool: Add Function to get the name of a CPU feature (Yannick Cote) [RHEL-152189] +- objtool: Provide access to feature and flags of group alternatives (Yannick Cote) [RHEL-152189] +- objtool: Fix address references in alternatives (Yannick Cote) [RHEL-152189] +- objtool: Disassemble jump table alternatives (Yannick Cote) [RHEL-152189] +- objtool: Disassemble exception table alternatives (Yannick Cote) [RHEL-152189] +- objtool: Print addresses with alternative instructions (Yannick Cote) [RHEL-152189] +- objtool: Disassemble group alternatives (Yannick Cote) [RHEL-152189] +- objtool: Print headers for alternatives (Yannick Cote) [RHEL-152189] +- objtool: Preserve alternatives order (Yannick Cote) [RHEL-152189] +- objtool: Add the --disas= action (Yannick Cote) [RHEL-152189] +- objtool: Do not validate IBT for .return_sites and .call_sites (Yannick Cote) [RHEL-152189] +- objtool: Improve tracing of alternative instructions (Yannick Cote) [RHEL-152189] +- objtool: Add functions to better name alternatives (Yannick Cote) [RHEL-152189] +- objtool: Identify the different types of alternatives (Yannick Cote) [RHEL-152189] +- objtool: Improve register reporting during function validation (Yannick Cote) [RHEL-152189] +- objtool: Trace instruction state changes during function validation (Yannick Cote) [RHEL-152189] +- objtool: Add option to trace function validation (Yannick Cote) [RHEL-152189] +- objtool: Record symbol name max length (Yannick Cote) [RHEL-152189] +- objtool: Extract code to validate instruction from the validate branch loop (Yannick Cote) [RHEL-152189] +- objtool: Disassemble instruction on warning or backtrace (Yannick Cote) [RHEL-152189] +- objtool: Store instruction disassembly result (Yannick Cote) [RHEL-152189] +- objtool: Print symbol during disassembly (Yannick Cote) [RHEL-152189] +- tool build: Remove annoying newline in build output (Yannick Cote) [RHEL-152189] +- objtool: Disassemble code with libopcodes instead of running objdump (Yannick Cote) [RHEL-152189] +- objtool: Create disassembly context (Yannick Cote) [RHEL-152189] +- objtool: Move disassembly functions to a separated file (Yannick Cote) [RHEL-152189] +- objtool: Remove second pass of .cold function correlation (Yannick Cote) [RHEL-152189] +- objtool: Skip non-canonical aliased symbols in add_jump_table_alts() (Yannick Cote) [RHEL-152189] +- objtool: Return canonical symbol when aliases exist in symbol finding helpers (Yannick Cote) [RHEL-152189] +- objtool: Don't alias undefined symbols (Yannick Cote) [RHEL-152189] +- objtool: Fix .cold function detection for duplicate symbols (Yannick Cote) [RHEL-152189] +- objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189] +- objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189] +- objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189] +- objtool/x86: Fix NOP decode (Yannick Cote) [RHEL-152189] +- objtool/x86: Add UDB support (Yannick Cote) [RHEL-152189] +- objtool/LoongArch: Mark special atomic instruction as INSN_BUG type (Yannick Cote) [RHEL-152189] +- objtool/LoongArch: Mark types based on break immediate code (Yannick Cote) [RHEL-152189] +- livepatch/klp-build: Fix inconsistent kernel version (Yannick Cote) [RHEL-152193] +- livepatch: Free klp_{object,func}_ext data after initialization (Yannick Cote) [RHEL-152193] +- livepatch: Fix having __klp_objects relics in non-livepatch modules (Yannick Cote) [RHEL-152193] +- livepatch/klp-build: Require Clang assembler >= 20 (Yannick Cote) [RHEL-152193] +- livepatch/klp-build: Fix klp-build vs CONFIG_MODULE_SRCVERSION_ALL (Yannick Cote) [RHEL-152193] +- selftests: livepatch: use canonical ftrace path (Yannick Cote) [RHEL-152193] +- livepatch: Match old_sympos 0 and 1 in klp_find_func() (Yannick Cote) [RHEL-152193] +- netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-168848] +- netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [RHEL-168848] +- netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-168848] +- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-168848] +- netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-168848] +- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-168848] +- netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-168848] +- netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-168848] +- netfilter: ipset: Fix data race between add and list header in all hash types (Florian Westphal) [RHEL-168848] +- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-168848] +- netfilter: nft_inner: release local_lock before re-enabling softirqs (Florian Westphal) [RHEL-168848] +- netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-168848] +- netfilter: nft_inner: Fix IPv6 inner_thoff desync (Florian Westphal) [RHEL-168848] +- netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-168848] +- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-168848] +- netfilter: bridge: eb_tables: close module init race (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: close dangling table module init race (Florian Westphal) [RHEL-168848] +- netfilter: ebtables: close dangling table module init race (Florian Westphal) [RHEL-168848] +- netfilter: ebtables: move to two-stage removal scheme (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: add and use xtables_unregister_table_exit (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: unregister the templates first (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: add and use xt_unregister_table_pre_exit (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: allocate hook ops while under mutex (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: allow initial table replace without emitting audit log message (Florian Westphal) [RHEL-168848] +- ipvs: do not leak dest after get from dest trash (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: fix inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: fix inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: ensure sufficient headroom in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: xtables: fix L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: skip L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848] +- netfilter: nf_socket: skip socket lookup for non-first fragments (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-168848] +- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-168848] +- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-168848] +- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-168848] +- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-168848] +- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-168848] +- netfilter: skip recording stale or retransmitted INIT (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-168848] +- netfilter: reject zero shift in nft_bitwise (Florian Westphal) [RHEL-168848] +- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-168848] +- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-168848] +- netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-168848] +- ipvs: fix MTU check for GSO packets in tunnel mode (Florian Westphal) [RHEL-168848] +- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-168848] +- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-168848] +- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_tproxy.sh: adjust to socat changes (Florian Westphal) [RHEL-168848] +- netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-168848] +- netfilter: ip6t_eui64: reject invalid MAC header for all packets (Florian Westphal) [RHEL-168848] +- netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: remove UDP-Lite conntrack support (Florian Westphal) [RHEL-168848] +- netfilter: xt_socket: enable defrag after all other checks (Florian Westphal) [RHEL-168848] +- netfilter: xt_HL: add pr_fmt and checkentry validation (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink: prefer skb_mac_header helpers (Florian Westphal) [RHEL-168848] +- netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-168848] +- selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-168848] +- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-168848] +- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-168848] +- ipvs: fix NULL deref in ip_vs_add_service error path (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined (Florian Westphal) [RHEL-168848] +- netfilter: nft_meta: add double-tagged vlan and pppoe support (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: add netlink policy based cap on registers (Florian Westphal) [RHEL-168848] +- netfilter: add more netlink-based policy range checks (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: remove unreliable debug code in decode_octstr (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Fix typo in enum description (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-168848] +- netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_helper: pass helper to expect cleanup (Florian Westphal) [RHEL-168848] +- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: revisit array resize logic (Florian Westphal) [RHEL-168848] +- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-168848] +- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-168848] +- netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-168848] +- netfilter: xt_time: use unsigned int for monthday bit shift (Florian Westphal) [RHEL-168848] +- netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-168848] +- netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-168848] +- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-168848] +- netfilter: nf_flow_table_ip: reset mac header before vlan push (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-168848] +- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Fix for duplicate device in netdev hooks (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: remove locking in nfqnl_get_sk_secctx (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: remove register tracking infrastructure (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: drop obsolete EXPORT_SYMBOLs (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: don't disable bh when acquiring tree lock (Florian Westphal) [RHEL-168848] +- ipvs: do not keep dest_dst after dest is removed (Florian Westphal) [RHEL-168848] +- ipvs: do not keep dest_dst if dev is going down (Florian Westphal) [RHEL-168848] +- ipvs: skip ipv6 extension headers for csum checks (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: revert commit_mutex usage in reset path (Florian Westphal) [RHEL-168848] +- netfilter: nft_quota: use atomic64_xchg for reset (Florian Westphal) [RHEL-168848] +- netfilter: nft_counter: serialize reset with spinlock (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: validate element belonging to interval (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Florian Westphal) [RHEL-168848] +- netfilter: nft_counter: fix reset of counters on 32bit archs (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-168848] +- selftests: netfilter: add IPV6_TUNNEL to config (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: dedicated slab for flow entry (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_queue.sh: add udp fraglist gro test case (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: don't gc elements on insert (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-168848] +- netfilter: xt_time: use is_leap_year() helper (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: Add IP6IP6 tx sw acceleration (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: Add IP6IP6 rx sw acceleration (Florian Westphal) [RHEL-168848] +- netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct (Florian Westphal) [RHEL-168848] +- netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto signature (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: remove seqcount_rwlock_t (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: use binary search array in get command (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_rbtree: translate rbtree to array for binary search (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: add .abort_skip_removal flag for set types (Florian Westphal) [RHEL-168848] +- netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-168848] +- netfilter: nf_conncount: fix tracking of connections from localhost (Florian Westphal) [RHEL-168848] +- netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal) [RHEL-168848] +- netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-168848] +- netfilter: don't include xt and nftables.h in unrelated subsystems (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack: enable icmp clash support (Florian Westphal) [RHEL-168848] +- netfilter: nf_conncount: increase the connection clean up limit to 64 (Florian Westphal) [RHEL-168848] +- netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: reset table validation state on abort (Florian Westphal) [RHEL-168848] +- netfilter: replace -EEXIST with -EBUSY (Florian Westphal) [RHEL-168848] +- netfilter: nft_synproxy: avoid possible data-race on update operation (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: fix range overlap detection (Florian Westphal) [RHEL-168848] +- audit: add audit_log_nf_skb helper function (Florian Westphal) [RHEL-168848] +- selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal) [RHEL-168848] +- selftests: netfilter: prefer xfail in case race wasn't triggered (Florian Westphal) [RHEL-168848] +- netfilter: always set route tuple out ifindex (Florian Westphal) [RHEL-168848] +- netfilter: nf_conncount: fix leaked ct in error paths (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: improve UAPI kernel-doc comments (Florian Westphal) [RHEL-168848] +- netfilter: ip6t_srh: fix UAPI kernel-doc comments format (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic (Florian Westphal) [RHEL-168848] +- netfilter: nft_connlimit: add support to object update operation (Florian Westphal) [RHEL-168848] +- netfilter: nft_connlimit: update the count if add was skipped (Florian Westphal) [RHEL-168848] +- netfilter: nf_conncount: rework API to use sk_buff directly (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: Add IPIP tx sw acceleration (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: Add IPIP rx sw acceleration (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: use tuple address to calculate next hop (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: remove hw_ifidx (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: consolidate xmit path (Florian Westphal) [RHEL-168848] +- netfilter: flowtable: move path discovery infrastructure to its own file (Florian Westphal) [RHEL-168848] +- netfilter: fix typo in nf_conntrack_l4proto.h comment (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: disable 0 value for conntrack_max setting (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-168848] +- selftests: netfilter: query conntrack state to check for port clash resolution (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_fib.sh: fix spurious test failures (Florian Westphal) [RHEL-168848] +- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-168848] +- netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal) [RHEL-168848] +- netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support (Florian Westphal) [RHEL-168848] +- netfilter: ipset: Remove unused htable_bits in macro ahash_region (Florian Westphal) [RHEL-168848] +- selftests: netfilter: fix udpclash tool hang (Florian Westphal) [RHEL-168848] +- netfilter: nft_payload: extend offset to 65535 bytes (Florian Westphal) [RHEL-168848] +- netfilter: nf_reject: remove unneeded exports (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: remove redundant test for avx feature bit (Florian Westphal) [RHEL-168848] +- netfilter: nft_payload: Use csum_replace4() instead of opencoding (Florian Westphal) [RHEL-168848] +- netfilter: ebtables: Use vmalloc_array() to improve code (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo: use avx2 algorithm for insertions too (Florian Westphal) [RHEL-168848] +- netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-168848] +- netfilter: ctnetlink: remove refcounting in dying list dumping (Florian Westphal) [RHEL-168848] +- selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Remove unused nft_reduce_is_readonly() (Florian Westphal) [RHEL-168848] +- netfilter: x_tables: Remove unused functions xt_{in|out}name() (Florian Westphal) [RHEL-168848] +- selftests: netfilter: tone-down conntrack clash test (Florian Westphal) [RHEL-168848] +- selftests: netfilter: conntrack_resize.sh: also use udpclash tool (Florian Westphal) [RHEL-168848] +- selftests: netfilter: add conntrack clash resolution test case (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Reintroduce shortened deletion notifications (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Drop dead code from fill_*_info routines (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: remove DCCP protocol support (Florian Westphal) [RHEL-168848] +- netfilter: nf_dup_netdev: Move the recursion counter struct netdev_xmit (Florian Westphal) [RHEL-168848] +- netfilter: nf_dup{4, 6}: Move duplication check to task_struct (Florian Westphal) [RHEL-168848] +- netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: Remove redundant NFCT_ALIGN call (Florian Westphal) [RHEL-168848] +- netfilter: xt_cgroup: Make it independent from net_cls (Florian Westphal) [RHEL-168848] +- netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies() (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINE (Florian Westphal) [RHEL-168848] +- netfilter: xtables: Use strscpy() instead of strscpy_pad() (Florian Westphal) [RHEL-168848] +- netfilter: xt_hashlimit: replace vmalloc calls with kvmalloc (Florian Westphal) [RHEL-168848] +- netfilter: conntrack: cleanup timeout definitions (Florian Westphal) [RHEL-168848] +- netfilter: bitwise: add support for doing AND, OR and XOR directly (Florian Westphal) [RHEL-168848] +- netfilter: bitwise: rename some boolean operation functions (Florian Westphal) [RHEL-168848] +- netfilter: nf_tables: replace deprecated strncpy with strscpy_pad (Florian Westphal) [RHEL-168848] +- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175537] {CVE-2026-31474} +- dmaengine: dw-edma: Add non-LL mode (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Add AMD MDB Endpoint Support (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Add device_{pause,resume}() callbacks (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Add device_tx_status() callback (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Use rz_lmdesc_setup() to invalidate descriptors (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Drop unnecessary local_irq_save() call (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Drop goto instruction and label (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Drop read of CHCTRL register (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz_dmac: add RZ/{T2H,N2H} support (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz_dmac: make register_dma_req() chip-specific (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz_dmac: make error interrupt optional (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Add virtual IRQ for interrupt-emulation doorbells (Eder Zulian) [RHEL-172442] +- dmaengine: dw_edma: correct kernel-doc warnings in (Eder Zulian) [RHEL-172442] +- New configs in drivers/dma (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Add interrupt-emulation hooks (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: fix MSI data programming for multi-IRQ case (Eder Zulian) [RHEL-172442] +- dmaengine: sh: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: bam_dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: adm: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442] +- dmaengine: bcm2835-dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154485 RHEL-172442] +- dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154485 RHEL-172442] +- dmaengine: sh: rz-dmac: Make channel irq local (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: uapi: use UAPI types (Eder Zulian) [RHEL-172442] +- dmaengine: sh: Discard pm_runtime_put() return value (Eder Zulian) [RHEL-172442] +- dmaengine: ti: Remove redundant pm_runtime_mark_last_busy() calls (Eder Zulian) [RHEL-172442] +- dmaengine: ti: k3-udma: enable compile testing (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: bam_dma: use lock guards (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: bam_dma: order includes alphabetically (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Fix confusing cleanup.h syntax (Eder Zulian) [RHEL-172442] +- dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172442] +- dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172442] +- dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172442] +- dmaengine: ti: dma-crossbar: clean up dra7x route allocation error paths (Eder Zulian) [RHEL-172442] +- dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172442] +- dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172442] +- dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172442] +- dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Eder Zulian) [RHEL-172442] +- dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172442] +- dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172442] +- dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172442] +- dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172442] +- dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172442] +- dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442] +- dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172442] +- dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442] +- dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172442] +- dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172442] +- dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172442] +- dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172442] +- dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172442] +- ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-137412] +- ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-137412] +- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-137412] +- ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-137412] +- ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-137412] +- ice: add dpll peer notification for paired SMA and U.FL pins (Michal Schmidt) [RHEL-137412] +- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-137412] +- ice: fix missing dpll notifications for SW pins (Michal Schmidt) [RHEL-137412] +- ice: fix SMA and U.FL pin state changes affecting paired pin (Michal Schmidt) [RHEL-137412] +- ice: fix missing SMA pin initialization in DPLL subsystem (Michal Schmidt) [RHEL-137412] +- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Michal Schmidt) [RHEL-137412] +- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Michal Schmidt) [RHEL-137412] +- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Michal Schmidt) [RHEL-137412] +- ice: fix ready bitmap check for non-E822 devices (Michal Schmidt) [RHEL-137412] +- ice: perform PHY soft reset for E825C ports at initialization (Michal Schmidt) [RHEL-137412] +- ice: fix timestamp interrupt configuration for E825C (Michal Schmidt) [RHEL-137412] +- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-137412] +- ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-137412] +- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-137412] +- ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-137412] +- ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-137412] +- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [ice] (Michal Schmidt) [RHEL-137412] +- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [ice] (Michal Schmidt) [RHEL-137412] +- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [ice] (Michal Schmidt) [RHEL-137412] +- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [ice] (Michal Schmidt) [RHEL-137412] +- ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-137412] +- ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-137412] +- ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-137412] +- ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-137412] +- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-137412] +- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Michal Schmidt) [RHEL-137412] +- ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-137412] +- ice: fix PTP timestamping broken by SyncE code on E825C (Michal Schmidt) [RHEL-137412] +- ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-137412] +- ice: use ice_update_eth_stats() for representor stats (Michal Schmidt) [RHEL-137412] +- ice: fix inverted ready check for VF representors (Michal Schmidt) [RHEL-137412] +- drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-137412] +- ice: fix rxq info registering in mbuf packets (Michal Schmidt) [RHEL-137412] +- ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-137412] +- ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-137412] +- ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-137412] +- ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-137412] +- ice: fix missing TX timestamps interrupts on E825 devices (Michal Schmidt) [RHEL-137412] +- ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-137412] +- ice: reshuffle and group Rx and Tx queue fields by cachelines (Michal Schmidt) [RHEL-137412] +- ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-137412] +- ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-137412] +- ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-137412] +- ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-137412] +- ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-137412] +- ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-137412] +- rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171746] +- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171457] {CVE-2026-31636} +- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171437] {CVE-2026-31607} +- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171420] {CVE-2026-31641} +- vxlan: validate ND option lengths in vxlan_na_create (Guillaume Nault) [RHEL-152728] +- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-152728] +- udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Guillaume Nault) [RHEL-152728] +- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Guillaume Nault) [RHEL-152728] +- ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152728] +- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152728] +- ipv4: ip_tunnel: spread netdev_lockdep_set_classes() (Guillaume Nault) [RHEL-152728] +- arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152728] +- erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152728] +- ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152728] +- selftest: packetdrill: add tcp_timestamping_tcp_tx_timestamp_bug.pkt (Paolo Abeni) [RHEL-152718] +- tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152718] +- net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152718] +- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-152718] +- tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152718] +- tcp: fix tcp_tso_should_defer() vs large RTT (Paolo Abeni) [RHEL-152718] +- tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() (Paolo Abeni) [RHEL-152718] +- net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Paolo Abeni) [RHEL-152718] +- wireguard: send: append trailer after expanding head (Toke Høiland-Jørgensen) [RHEL-152735] +- wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit (Toke Høiland-Jørgensen) [RHEL-152735] {CVE-2026-31579} +- wireguard: allowedips: remove redundant space (Toke Høiland-Jørgensen) [RHEL-152735] +- wireguard: allowedips: Use kfree_rcu() instead of call_rcu() (Toke Høiland-Jørgensen) [RHEL-152735] +- wireguard: netlink: generate netlink code (CKI Backport Bot) [RHEL-152735] +- wireguard: uapi: generate header with ynl-gen (CKI Backport Bot) [RHEL-152735] +- wireguard: uapi: move flag enums (CKI Backport Bot) [RHEL-152735] +- wireguard: uapi: move enum wg_cmd (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: add YNL specification (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: lower .maxattr for WG_CMD_GET_DEVICE (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: convert to split ops (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: use WG_KEY_LEN in policies (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: validate nested arrays in policy (CKI Backport Bot) [RHEL-152735] +- wireguard: netlink: enable strict genetlink validation (CKI Backport Bot) [RHEL-152735] +- wireguard: queueing: always return valid online CPU in wg_cpumask_choose_online() (CKI Backport Bot) [RHEL-152735] +- wireguard: queueing: simplify wg_cpumask_next_online() (CKI Backport Bot) [RHEL-152735] +- wireguard: peer: Replace sockaddr with sockaddr_inet (CKI Backport Bot) [RHEL-152735] +- ipv6: Add sockaddr_inet unified address structure (CKI Backport Bot) [RHEL-152735] +- clocksource/drivers/arm_arch_timer_mmio: Prevent driver unbind (Mark Langsdorf) [RHEL-156420] +- ACPI: GTDT: Get rid of acpi_arch_timer_mem_init() (Mark Langsdorf) [RHEL-156420] +- clocksource/drivers/arm_arch_timer_mmio: Switch over to standalone driver (Mark Langsdorf) [RHEL-156420] +- clocksource/drivers/arm_arch_timer: Add standalone MMIO driver (Mark Langsdorf) [RHEL-156420] +- ACPI: tools: pfrut: fix memory leak and resource leak in pfrut.c (Mark Langsdorf) [RHEL-156420] +- ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420] +- ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420] +- ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156420] +- ACPI: video: Move Lenovo Legion S7 15ACH6 quirk to the right section (Mark Langsdorf) [RHEL-156420] +- ACPI: RIMT: Add dependency between iommu and devices (Mark Langsdorf) [RHEL-156420] +- genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156420] +- drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156420] +- ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156420] +- ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156420] +- ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156420] +- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156420] +- ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156420] +- ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156420] +- ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156420] +- hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156420] +- hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156420] +- ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156420] +- ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156420] +- ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156420] +- ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420] +- ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156420] +- ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156420] +- x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156420] +- ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156420] +- ACPICA: actbl2.h: ACPI 6.6: RAS2: Update Parameter Block structure (Mark Langsdorf) [RHEL-156420] +- ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156420] +- ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156420] +- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156420] +- ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156420] +- ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156420] +- ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156420] +- ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156420] +- ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156420] +- APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Rearrange declarations in header file (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156420] +- ACPI: acpi_watchdog: use LIST_HEAD for stack-allocated list (Mark Langsdorf) [RHEL-156420] +- ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156420] +- ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156420] +- ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156420] +- ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156420] +- ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156420] +- ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156420] +- ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156420] +- compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156420] +- wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156420] +- ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156420] +- ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156420] +- ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156420] +- ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156420] +- ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156420] +- x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156420] +- acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156420] +- vmcoreinfo: make hwerr_data visible for debugging (Mark Langsdorf) [RHEL-156420] +- vmcoreinfo: track and log recoverable hardware errors (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420] +- ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420] +- ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156420] +- ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156420] +- ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-156420] +- acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156420] +- acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156420] +- ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156420] +- ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156420] +- ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420] +- ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420] +- ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156420] +- ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156420] +- ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156420] +- ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156420] +- ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156420] +- ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156420] +- ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156420] +- ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156420] +- ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156420] +- ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156420] +- ACPI: RIMT: Fix unused function warnings when CONFIG_IOMMU_API is disabled (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156420] +- ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156420] +- cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156420] +- cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156420] +- ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156420] +- ACPI: support BGRT table on RISC-V (Mark Langsdorf) [RHEL-156420] +- ACPI: RISC-V: Add RPMI System MSI to GSI mapping (Mark Langsdorf) [RHEL-156420] +- ACPI: RISC-V: Add support to update gsi range (Mark Langsdorf) [RHEL-156420] +- ACPI: RISC-V: Create interrupt controller list in sorted order (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Update honor list for RPMI System MSI (Mark Langsdorf) [RHEL-156420] +- ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156420] +- ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156420] +- x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156420] +- ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156420] +- ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156420] +- ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156420] +- ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156420] +- ACPI: SPCR: Add support for DBG2 RISC-V SBI port subtype (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156420] +- ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156420] +- ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156420] +- ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156420] +- ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156420] +- ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156420] +- ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156420] +- ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156420] +- ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156420] +- ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156420] +- ACPI: scan: Add support for RISC-V in acpi_iommu_configure_id() (Mark Langsdorf) [RHEL-156420] +- ACPI: RISC-V: Add support for RIMT (Mark Langsdorf) [RHEL-156420] +- ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156420] +- ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-156420] +- ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156420] +- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156420] +- ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156420] +- ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156420] +- ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156420] +- ACPI: video: force native for Lenovo 82K8 (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156420] +- ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156420] +- ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156420] +- irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156420] +- redhat/configs: automotive: enable NXP_SAR_ADC as a module (Jared Kangas) [RHEL-156761] +- iio: adc: nxp-sar-adc: Avoid division by zero (Jared Kangas) [RHEL-156761] +- iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Jared Kangas) [RHEL-156761] +- iio: adc: nxp-sar-adc: fix division by zero in write_raw (Jared Kangas) [RHEL-156761] +- iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Jared Kangas) [RHEL-156761] +- iio: buffer: Fix wait_queue not being removed (Jared Kangas) [RHEL-156761] +- iio: buffer: buffer_impl.h: fix kernel-doc warnings (Jared Kangas) [RHEL-156761] +- iio: core: Add cleanup.h support for iio_device_claim_*() (Jared Kangas) [RHEL-156761] +- iio: core: Refactor iio_device_claim_direct() implementation (Jared Kangas) [RHEL-156761] +- iio: core: Add and export __iio_dev_mode_lock() (Jared Kangas) [RHEL-156761] +- iio: core: Constify struct configfs_item_operations and configfs_group_operations (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: Fix coding style complains (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: Use the cleanup.h API (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Fix coding style complains (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Turn iio_dma_buffer_init() void (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Use the cleanup.h API (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Use lockdep for locking annotations (Jared Kangas) [RHEL-156761] +- iio: core: add separate lockdep class for info_exist_lock (Jared Kangas) [RHEL-156761] +- iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Jared Kangas) [RHEL-156761] +- dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Jared Kangas) [RHEL-156761] +- iio: buffer: use dma_buf_unmap_attachment_unlocked() helper (Jared Kangas) [RHEL-156761] +- iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Jared Kangas) [RHEL-156761] +- iio: core: Clean up device correctly on iio_device_alloc() failure (Jared Kangas) [RHEL-156761] +- iio: core: add missing mutex_destroy in iio_dev_release() (Jared Kangas) [RHEL-156761] +- iio: backend: fix kernel-doc to avoid warnings and ensure consistency (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: enable .get_dma_dev() (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: support getting the DMA channel (Jared Kangas) [RHEL-156761] +- iio: buffer: support getting dma channel from the buffer (Jared Kangas) [RHEL-156761] +- iio: buffer: document that buffer callback must be context safe (Jared Kangas) [RHEL-156761] +- iio: buffer: document store_to() callback may be called in any context (Jared Kangas) [RHEL-156761] +- iio: buffer: document iio_push_to_buffers() calling context (Jared Kangas) [RHEL-156761] +- iio: buffer: iio_push_to_buffers_with_ts_unaligned() might_sleep() (Jared Kangas) [RHEL-156761] +- iio: buffer: document iio_push_to_buffers_with_ts_unaligned() may sleep (Jared Kangas) [RHEL-156761] +- iio: add IIO_ALTCURRENT channel type (Jared Kangas) [RHEL-156761] +- iio: core: switch info_mask fields to unsigned long to match find_bit helpers (Jared Kangas) [RHEL-156761] +- iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Jared Kangas) [RHEL-156761] +- iio: buffer: buffer-cb: drop double initialization of demux list (Jared Kangas) [RHEL-156761] +- iio: fix iio_push_to_buffers_with_ts() typo (Jared Kangas) [RHEL-156761] +- iio: trigger: stm32-lptimer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761] +- iio: trigger: stm32-timer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761] +- iio: adc: stm32-dfsdm: Fix build warnings about export.h (Jared Kangas) [RHEL-156761] +- iio: core: add ADC delay calibration definition (Jared Kangas) [RHEL-156761] +- iio: buffer: Fix checkpatch.pl warning (Jared Kangas) [RHEL-156761] +- iio: backend: add support for number of lanes (Jared Kangas) [RHEL-156761] +- iio: backend: add support for data alignment (Jared Kangas) [RHEL-156761] +- iio: backend: add support for filter config (Jared Kangas) [RHEL-156761] +- iio: fix potential out-of-bound write (Jared Kangas) [RHEL-156761] +- iio: backend: fix out-of-bound write (Jared Kangas) [RHEL-156761] +- iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Jared Kangas) [RHEL-156761] +- iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Jared Kangas) [RHEL-156761] +- iio: backend: add support for data source get (Jared Kangas) [RHEL-156761] +- iio: Adjust internals of handling of direct mode claiming to suit new API. (Jared Kangas) [RHEL-156761] +- iio: core: Add support for writing 64 bit attrs (Jared Kangas) [RHEL-156761] +- MAINTAINERS: Add IIO ADC helpers (Jared Kangas) [RHEL-156761] +- iio: adc: add helpers for parsing ADC nodes (Jared Kangas) [RHEL-156761] +- iio: buffer-dma: Fix docstrings (Jared Kangas) [RHEL-156761] +- iio: core: make use of simple_write_to_buffer() (Jared Kangas) [RHEL-156761] +- iio: backend: make sure to NULL terminate stack buffer (Jared Kangas) [RHEL-156761] +- iio: backend: add API for oversampling (Jared Kangas) [RHEL-156761] +- iio: backend: add support for data size set (Jared Kangas) [RHEL-156761] +- iio: backend: add API for interface get (Jared Kangas) [RHEL-156761] +- iio: core: Rework claim and release of direct mode to work with sparse. (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: add devm_iio_dmaengine_buffer_setup_with_handle() (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: split requesting DMA channel from allocating buffer (Jared Kangas) [RHEL-156761] +- iio: gts-helper: export iio_gts_get_total_gain() (Jared Kangas) [RHEL-156761] +- iio: introduce the FAULT event type (Jared Kangas) [RHEL-156761] +- iio: gts-helper: add helpers to ease searches of gain_sel and new_gain (Jared Kangas) [RHEL-156761] +- iio: gts: Simplify available scale table build (Jared Kangas) [RHEL-156761] +- iio: consumers: ensure read buffers for labels and ext_info are page aligned (Jared Kangas) [RHEL-156761] +- iio: core: fix doc reference to iio_push_to_buffers_with_ts_unaligned (Jared Kangas) [RHEL-156761] +- iio: trigger: stm32-timer-trigger: Add check for clk_enable() (Jared Kangas) [RHEL-156761] +- iio: buffer-dmaengine: document iio_dmaengine_buffer_setup_ext (Jared Kangas) [RHEL-156761] +- iio: Move __private marking before struct element priv in struct iio_dev (Jared Kangas) [RHEL-156761] +- iio: events: make IIO_EVENT_CODE macro private (Jared Kangas) [RHEL-156761] +- iio: Mark iio_dev::priv member with __private (Jared Kangas) [RHEL-156761] +- iio: Add channel type for attention (Jared Kangas) [RHEL-156761] +- iio: gts: fix infinite loop for gain_to_scaletables() (Jared Kangas) [RHEL-156761] +- iio: gts: Fix uninitialized symbol 'ret' (Jared Kangas) [RHEL-156761] +- iio: backend: extend features (Jared Kangas) [RHEL-156761] +- iio: events.h: add event identifier macros for differential channel (Jared Kangas) [RHEL-156761] +- iio: backend: fix wrong pointer passed to IS_ERR() (Jared Kangas) [RHEL-156761] +- iio: Convert unsigned to unsigned int (Jared Kangas) [RHEL-156761] +- iio: adc: Convert to IIO_MAP() (Jared Kangas) [RHEL-156761] +- iio: adc: Constify struct iio_map (Jared Kangas) [RHEL-156761] +- netdev: add io_uring memory provider info (Davide Caratti) [RHEL-141853] +- net: add helpers for setting a memory provider on an rx queue (Davide Caratti) [RHEL-141853] +- net: page_pool: add memory provider helpers (Davide Caratti) [RHEL-141853] +- net: prepare for non devmem TCP memory providers (Davide Caratti) [RHEL-141853] +- net: page_pool: add a mp hook to unregister_netdevice* (Davide Caratti) [RHEL-141853] +- net: page_pool: add callback for mp info printing (Davide Caratti) [RHEL-141853] +- net: page_pool: create hooks for custom memory providers (Davide Caratti) [RHEL-141853] +- net: generalise net_iov chunk owners (Davide Caratti) [RHEL-141853] +- net: prefix devmem specific helpers (Davide Caratti) [RHEL-141853] +- net: page_pool: don't cast mp param to devmem (Davide Caratti) [RHEL-141853] +- selftests: drv-net-hw: inject pp_alloc_fail errors in the right place (Davide Caratti) [RHEL-141853] +- net: page_pool: rename page_pool_is_last_ref() (Davide Caratti) [RHEL-141853] +- net: page_pool: do not count normal frag allocation in stats (Davide Caratti) [RHEL-141853] + * Wed Jun 10 2026 CKI KWF Bot [6.12.0-238.el10] - redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov) - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (Mamatha Inamdar) [RHEL-174883] diff --git a/sources b/sources index 5d8e79bab..6234ad99c 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6 -SHA512 (linux-6.12.0-238.el10.tar.xz) = 27e314bcf4f6588432a8663cbca259fdbdc09a9c1edf207b54ab6ef16663718e850720673f3a00a3f82bbd72c667550d72ff557e3d5ad6fdade670530732f4aa -SHA512 (kernel-abi-stablelists-6.12.0-238.el10.tar.xz) = 92080af16debf6f37e7d3cb31e2fadebaf4dfe4162d69173e2d60abe73956eaf073044e2677d391297285210cdf8d929a518e876fb35f45236d64c9e128a8135 -SHA512 (kernel-kabi-dw-6.12.0-238.el10.tar.xz) = 6a90be8a2d6bc112fe22d9ca4bd6bdb3770ca717907d266d11ce4f9d33565ba1bcbeb7472abd2fa8315589909a7c8e6fecfb298f17c0b3c74633ccce3b5fac15 +SHA512 (linux-6.12.0-239.el10.tar.xz) = 1722664fa3fc3e6a37acf3570902639581ab3c8e33f9105f1c1888a6c3532dadea4e397b11e66c7354241a3b53d55a5ff31d04b47723dbddef05432a245debd7 +SHA512 (kernel-abi-stablelists-6.12.0-239.el10.tar.xz) = 252d746eaecd51c51d804610e98be712f860752b80613ace99a48469f7cb1cca2a879c43ecd42252e3eb82414fd58d0c39dea57ebdf0087d1b3d46a6388b8a5a +SHA512 (kernel-kabi-dw-6.12.0-239.el10.tar.xz) = be6e792a9ca30912026312d46b240b518f865147f850cfd37fcda1fab434389bafb7d392f43face1ecec20dd141a1d21ca443527d0f1bb8db8d5b96e75417e70