diff --git a/Makefile.rhelver b/Makefile.rhelver
index 9643d2e80..c4380387b 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 1
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 106
+RHEL_RELEASE = 107
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index 2bd57e81a..c157e8f14 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -243,6 +243,7 @@ CONFIG_AMD_XGBE=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5257,6 +5258,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 CONFIG_PVPANIC_PCI=m
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 8778f63a5..5dfd6b4db 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -243,6 +243,7 @@ CONFIG_AMD_XGBE=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5234,6 +5235,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 CONFIG_PVPANIC_PCI=m
diff --git a/kernel-aarch64-automotive-debug-rhel.config b/kernel-aarch64-automotive-debug-rhel.config
index fa8d98b9c..2aaffef31 100644
--- a/kernel-aarch64-automotive-debug-rhel.config
+++ b/kernel-aarch64-automotive-debug-rhel.config
@@ -245,6 +245,7 @@ CONFIG_AMD_PMC=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5630,6 +5631,7 @@ CONFIG_PTP_1588_CLOCK=m
 CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 # CONFIG_PVPANIC_PCI is not set
diff --git a/kernel-aarch64-automotive-rhel.config b/kernel-aarch64-automotive-rhel.config
index 695104e83..782f890c7 100644
--- a/kernel-aarch64-automotive-rhel.config
+++ b/kernel-aarch64-automotive-rhel.config
@@ -245,6 +245,7 @@ CONFIG_AMD_PMC=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5607,6 +5608,7 @@ CONFIG_PTP_1588_CLOCK=m
 CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 # CONFIG_PVPANIC_PCI is not set
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 40830fcd2..af45cae66 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -243,6 +243,7 @@ CONFIG_AMD_XGBE=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5253,6 +5254,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 CONFIG_PVPANIC_PCI=m
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index ab3d16d3e..766b1b857 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -243,6 +243,7 @@ CONFIG_AMD_XGBE=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5230,6 +5231,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 CONFIG_PVPANIC_PCI=m
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 577a67988..6a10b4ea9 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -243,6 +243,7 @@ CONFIG_AMD_XGBE=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5301,6 +5302,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 CONFIG_PVPANIC_PCI=m
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index 8d1b13a32..6fc0f3d41 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -243,6 +243,7 @@ CONFIG_AMD_XGBE=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5278,6 +5279,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 CONFIG_PVPANIC_PCI=m
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index bb41b0db1..9aece9e1f 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -243,6 +243,7 @@ CONFIG_AMD_XGBE=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5297,6 +5298,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 CONFIG_PVPANIC_PCI=m
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index f4e17710c..0e4698e38 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -243,6 +243,7 @@ CONFIG_AMD_XGBE=m
 # CONFIG_AMIGA_PARTITION is not set
 CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU=m
 CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
+CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
 # CONFIG_AMT is not set
 # CONFIG_ANDROID_BINDER_IPC is not set
 # CONFIG_ANON_VMA_NAME is not set
@@ -5274,6 +5275,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_QORIQ=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC_MMIO is not set
 CONFIG_PVPANIC_PCI=m
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 63cb04252..01d7bd8aa 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -4835,6 +4835,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m
 CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC is not set
 # CONFIG_PVPANIC_MMIO is not set
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 8edd09e19..70694b02a 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -4814,6 +4814,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m
 CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC is not set
 # CONFIG_PVPANIC_MMIO is not set
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index d3cfa7666..3ef178ceb 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -4770,6 +4770,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m
 CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC is not set
 # CONFIG_PVPANIC_MMIO is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 9642550f5..013d90d2e 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -4749,6 +4749,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m
 CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC is not set
 # CONFIG_PVPANIC_MMIO is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 43a6e5994..891f794fe 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -4761,6 +4761,7 @@ CONFIG_PTP_1588_CLOCK_KVM=m
 # CONFIG_PTP_1588_CLOCK_MOCK is not set
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 # CONFIG_PVPANIC is not set
 # CONFIG_PVPANIC_MMIO is not set
diff --git a/kernel-x86_64-automotive-debug-rhel.config b/kernel-x86_64-automotive-debug-rhel.config
index 48d34c84c..014a685b9 100644
--- a/kernel-x86_64-automotive-debug-rhel.config
+++ b/kernel-x86_64-automotive-debug-rhel.config
@@ -5248,6 +5248,7 @@ CONFIG_PTP_1588_CLOCK=m
 CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_VMW=m
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 CONFIG_PVH=y
 # CONFIG_PVPANIC_MMIO is not set
@@ -7285,6 +7286,7 @@ CONFIG_TASK_XACCT=y
 CONFIG_TCG_CRB=y
 # CONFIG_TCG_INFINEON is not set
 # CONFIG_TCG_NSC is not set
+CONFIG_TCG_SVSM=m
 # CONFIG_TCG_TIS_I2C_ATMEL is not set
 CONFIG_TCG_TIS_I2C_CR50=m
 # CONFIG_TCG_TIS_I2C_INFINEON is not set
diff --git a/kernel-x86_64-automotive-rhel.config b/kernel-x86_64-automotive-rhel.config
index af9197390..d31eee277 100644
--- a/kernel-x86_64-automotive-rhel.config
+++ b/kernel-x86_64-automotive-rhel.config
@@ -5226,6 +5226,7 @@ CONFIG_PTP_1588_CLOCK=m
 CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_VMW=m
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 CONFIG_PVH=y
 # CONFIG_PVPANIC_MMIO is not set
@@ -7261,6 +7262,7 @@ CONFIG_TASK_XACCT=y
 CONFIG_TCG_CRB=y
 # CONFIG_TCG_INFINEON is not set
 # CONFIG_TCG_NSC is not set
+CONFIG_TCG_SVSM=m
 # CONFIG_TCG_TIS_I2C_ATMEL is not set
 CONFIG_TCG_TIS_I2C_CR50=m
 # CONFIG_TCG_TIS_I2C_INFINEON is not set
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 7997e3d34..bf28a275b 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -5099,6 +5099,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_VMW=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 CONFIG_PVH=y
 CONFIG_PVPANIC_MMIO=m
@@ -7051,6 +7052,7 @@ CONFIG_TASK_XACCT=y
 CONFIG_TCG_CRB=y
 # CONFIG_TCG_INFINEON is not set
 # CONFIG_TCG_NSC is not set
+CONFIG_TCG_SVSM=m
 # CONFIG_TCG_TIS_I2C_ATMEL is not set
 CONFIG_TCG_TIS_I2C_CR50=m
 # CONFIG_TCG_TIS_I2C_INFINEON is not set
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index d6e422fe7..341c6292e 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -5077,6 +5077,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_VMW=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 CONFIG_PVH=y
 CONFIG_PVPANIC_MMIO=m
@@ -7027,6 +7028,7 @@ CONFIG_TASK_XACCT=y
 CONFIG_TCG_CRB=y
 # CONFIG_TCG_INFINEON is not set
 # CONFIG_TCG_NSC is not set
+CONFIG_TCG_SVSM=m
 # CONFIG_TCG_TIS_I2C_ATMEL is not set
 CONFIG_TCG_TIS_I2C_CR50=m
 # CONFIG_TCG_TIS_I2C_INFINEON is not set
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index 5c0269487..0cb537cd2 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -5143,6 +5143,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_VMW=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 CONFIG_PVH=y
 CONFIG_PVPANIC_MMIO=m
@@ -7099,6 +7100,7 @@ CONFIG_TASK_XACCT=y
 CONFIG_TCG_CRB=y
 # CONFIG_TCG_INFINEON is not set
 # CONFIG_TCG_NSC is not set
+CONFIG_TCG_SVSM=m
 # CONFIG_TCG_TIS_I2C_ATMEL is not set
 CONFIG_TCG_TIS_I2C_CR50=m
 # CONFIG_TCG_TIS_I2C_INFINEON is not set
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index aee28310a..c6d4c0cc8 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -5121,6 +5121,7 @@ CONFIG_PTP_1588_CLOCK_MOCK=m
 # CONFIG_PTP_1588_CLOCK_OCP is not set
 CONFIG_PTP_1588_CLOCK_VMW=m
 CONFIG_PTP_1588_CLOCK=y
+CONFIG_PT_RECLAIM=y
 # CONFIG_PUNIT_ATOM_DEBUG is not set
 CONFIG_PVH=y
 CONFIG_PVPANIC_MMIO=m
@@ -7075,6 +7076,7 @@ CONFIG_TASK_XACCT=y
 CONFIG_TCG_CRB=y
 # CONFIG_TCG_INFINEON is not set
 # CONFIG_TCG_NSC is not set
+CONFIG_TCG_SVSM=m
 # CONFIG_TCG_TIS_I2C_ATMEL is not set
 CONFIG_TCG_TIS_I2C_CR50=m
 # CONFIG_TCG_TIS_I2C_INFINEON is not set
diff --git a/kernel.changelog b/kernel.changelog
index 0c3bd0c4a..7f6901a2c 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,229 @@
+* Tue Jul 08 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-107.el10]
+- spec: fix spec warning for /usr/include/ynl (Alexandra Hájková) [RHEL-101712]
+- nvme: avoid creating multipath sysfs group under namespace path devices (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: make nvme_pci_npages_prp() __always_inline (Maurizio Lombardi) [RHEL-95382]
+- nvme: unblock ctrl state transition for firmware update (Maurizio Lombardi) [RHEL-95382]
+- nvmet-tcp: don't restore null sk_state_change (Maurizio Lombardi) [RHEL-95382]
+- nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS (Maurizio Lombardi) [RHEL-95382]
+- nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS (Maurizio Lombardi) [RHEL-95382]
+- nvme-tcp: fix premature queue removal and I/O failover (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: add quirks for WDC Blue SN550 15b7:5009 (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: add quirks for device 126f:1001 (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: fix queue unquiesce check on slot_reset (Maurizio Lombardi) [RHEL-95382]
+- nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-95382]
+- nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-95382]
+- nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-95382]
+- nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-95382]
+- nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-95382]
+- nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-95382]
+- nvme/ioctl: move fixed buffer lookup to nvme_uring_cmd_io() (Maurizio Lombardi) [RHEL-95382]
+- nvme/ioctl: move blk_mq_free_request() out of nvme_map_user_request() (Maurizio Lombardi) [RHEL-95382]
+- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-95382]
+- nvme: convert timeouts to secs_to_jiffies() (Maurizio Lombardi) [RHEL-95382]
+- nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-95382]
+- nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-95382]
+- nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-95382]
+- nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-95382]
+- nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-95382]
+- nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-95382]
+- io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-95382]
+- sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CKI Backport Bot) [RHEL-101330] {CVE-2025-38089}
+- net: fix udp gso skb_segment after pull from frag_list (Paolo Abeni) [RHEL-96626]
+- net: ipv6: fix UDPv6 GSO segmentation with NAT (Paolo Abeni) [RHEL-96626]
+- softirq: use bit waits instead of var waits. (Phil Auld) [RHEL-96261]
+- sched: add wait_var_event_io() (Phil Auld) [RHEL-96261]
+- sched: Add wait/wake interface for variable updated under a lock. (Phil Auld) [RHEL-96261]
+- sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (Phil Auld) [RHEL-96261]
+- sched: Document wait_var_event() family of functions and wake_up_var() (Phil Auld) [RHEL-96261]
+- sched: Improve documentation for wake_up_bit/wait_on_bit family of functions (Phil Auld) [RHEL-96261]
+- sched: change wake_up_bit() and related function to expect unsigned long * (Phil Auld) [RHEL-96261]
+- net-timestamp: COMPLETION timestamp on packet tx completion (Petr Oros) [RHEL-100002]
+- net: skb: free up one bit in tx_flags (Petr Oros) [RHEL-100002]
+- selftests/bpf: Add simple bpf tests in the tx path for timestamping feature (Petr Oros) [RHEL-100002]
+- bpf: Support selective sampling for bpf timestamping (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_SENDMSG_CB callback (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_ACK_CB callback (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_SND_HW_CB callback (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_SND_SW_CB callback (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_SCHED_CB callback (Petr Oros) [RHEL-100002]
+- net-timestamp: Prepare for isolating two modes of SO_TIMESTAMPING (Petr Oros) [RHEL-100002]
+- bpf: Disable unsafe helpers in TX timestamping callbacks (Petr Oros) [RHEL-100002]
+- bpf: Prevent unsafe access to the sock fields in the BPF timestamping callback (Petr Oros) [RHEL-100002]
+- bpf: Prepare the sock_ops ctx and call bpf prog for TX timestamping (Petr Oros) [RHEL-100002]
+- bpf: Add networking timestamping support to bpf_get/setsockopt() (Petr Oros) [RHEL-100002]
+- selftests: txtimestamp: add SCM_TS_OPT_ID test (Petr Oros) [RHEL-100002]
+- net_tstamp: add SCM_TS_OPT_ID for RAW sockets (Petr Oros) [RHEL-100002]
+- net_tstamp: add SCM_TS_OPT_ID to provide OPT_ID in control message (Petr Oros) [RHEL-100002]
+- selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (CKI Backport Bot) [RHEL-99477]
+- selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (CKI Backport Bot) [RHEL-99477]
+- netfilter: nf_set_pipapo_avx2: fix initial map fill (CKI Backport Bot) [RHEL-99477]
+- selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (CKI Backport Bot) [RHEL-99477]
+- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (CKI Backport Bot) [RHEL-99477]
+- netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (CKI Backport Bot) [RHEL-99477]
+- netfilter: nft_inner: Use nested-BH locking for nft_pcpu_tun_ctx (CKI Backport Bot) [RHEL-99473]
+- netfilter: nft_tunnel: fix geneve_opt dump (CKI Backport Bot) [RHEL-99473]
+- netfilter: nft_quota: match correctly when the quota just depleted (CKI Backport Bot) [RHEL-99473]
+- netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (CKI Backport Bot) [RHEL-99473]
+- netfilter: nf_tables: don't unregister hook when table is dormant (CKI Backport Bot) [RHEL-99473]
+- redhat/configs: enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-78258]
+- mm: pgtable: fix incorrect reclaim of non-empty PTE pages (Luiz Capitulino) [RHEL-78258]
+- x86: select ARCH_SUPPORTS_PT_RECLAIM if X86_64 (Luiz Capitulino) [RHEL-78258]
+- x86: mm: free page table pages by RCU instead of semi RCU (Luiz Capitulino) [RHEL-78258]
+- mm: pgtable: reclaim empty PTE page in madvise(MADV_DONTNEED) (Luiz Capitulino) [RHEL-78258]
+- mm: make zap_pte_range() handle full within-PMD range (Luiz Capitulino) [RHEL-78258]
+- mm: do_zap_pte_range: return any_skipped information to the caller (Luiz Capitulino) [RHEL-78258]
+- mm: zap_install_uffd_wp_if_needed: return whether uffd-wp pte has been re-installed (Luiz Capitulino) [RHEL-78258]
+- mm: skip over all consecutive none ptes in do_zap_pte_range() (Luiz Capitulino) [RHEL-78258]
+- mm: introduce do_zap_pte_range() (Luiz Capitulino) [RHEL-78258]
+- mm: introduce zap_nonpresent_ptes() (Luiz Capitulino) [RHEL-78258]
+- mm: userfaultfd: recheck dst_pmd entry in move_pages_pte() (Luiz Capitulino) [RHEL-78258]
+- mm: khugepaged: recheck pmd state in retract_page_tables() (Luiz Capitulino) [RHEL-78258]
+- docs/mm: add VMA locks documentation (Luiz Capitulino) [RHEL-78258]
+- redhat/configs: enable CONFIG_TCG_SVSM (Stefano Garzarella) [RHEL-92271]
+- x86/sev: Register tpm-svsm platform device (Stefano Garzarella) [RHEL-92271]
+- tpm: Add SNP SVSM vTPM driver (Stefano Garzarella) [RHEL-92271]
+- svsm: Add header with SVSM_VTPM_CMD helpers (Stefano Garzarella) [RHEL-92271]
+- x86/sev: Add SVSM vTPM probe/send_command functions (Stefano Garzarella) [RHEL-92271]
+- KVM: arm64: VHE: Synchronize CPTR trap deactivation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: VHE: Synchronize restore of host debug registers (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Explicitly treat routing entry type changes as changes (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: vgic-init: Plug vCPU vs. VGIC creation race (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Unmap vLPIs affected by changes to GSI routing information (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Resolve vLPI by host IRQ in vgic_v4_unset_forwarding() (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Protect vLPI translation with vgic_irq::irq_lock (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Use lock guard in vgic_v4_set_forwarding() (Sebastian Ott) [RHEL-92805]
+- arm64: Add override for MPAM (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop sort_memblock_regions() (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Switch to use hrtimer_setup() (Sebastian Ott) [RHEL-92805]
+- tools headers UAPI: Sync linux/kvm.h with the kernel sources (Sebastian Ott) [RHEL-92805]
+- KVM: selftests: Confirm exposing MTE_frac does not break migration (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Make MTE_frac masking conditional on MTE capability (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Expose MTE_frac so that it is visible to KVM (Sebastian Ott) [RHEL-92805]
+- redhat/configs: Enable CONFIG_AMPERE_ERRATUM_AC04_CPU_23 (Sebastian Ott) [RHEL-92805]
+- arm64: sysreg: Drag linux/kconfig.h to work around vdso build issue (Sebastian Ott) [RHEL-92805]
+- arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (Sebastian Ott) [RHEL-92805]
+- arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HFGWTR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HFGRTR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HFGITR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HDFGWTR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HDFGRTR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Allow userspace to request KVM_ARM_VCPU_EL2* (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Document NV caps and vcpu flags (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftests: Determine effective counter width in arch_timer_edge_cases (Sebastian Ott) [RHEL-84459 RHEL-92805]
+- KVM: arm64: selftests: Fix xVAL init in arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftests: Fix thread migration in arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftests: Fix help text for arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
+- smccc: kvm_guest: Align with DISCOVER_IMPL_CPUS ABI (Sebastian Ott) [RHEL-92805]
+- arm64: Rework checks for broken Cavium HW in the PI code (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftest: Don't try to disable AArch64 support (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Fix memory check in host_stage2_set_owner_locked() (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Kill HCRX_HOST_FLAGS (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Properly save/restore HCRX_EL2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Prevent userspace from disabling AArch64 support at any virtualisable EL (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Force HCR_EL2.xMO to 1 at all times in VHE mode (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() (Sebastian Ott) [RHEL-88996 RHEL-92805]
+- KVM: arm64: Use acquire/release to communicate FF-A version negotiation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Don't translate FAR if invalid/unsafe (Sebastian Ott) [RHEL-92805]
+- arm64: Convert HPFAR_EL2 to sysreg table (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Only read HPFAR_EL2 when value is architecturally valid (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Tear down vGIC on failed vCPU creation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Reload when resetting (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Reload when user modifies registers (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Fix SET_ONE_REG for vPMC regs (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Assume PMU presence in pmu-emul.c (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Create each pKVM hyp vcpu after its corresponding host vcpu (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Initialize HCRX_EL2 traps in pKVM (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Factor out setting HCRX_EL2 traps into separate function (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Count pKVM stage-2 usage in secondary pagetable stats (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Distinct pKVM teardown memcache for stage-2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Add flags to kvm_hyp_memcache (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftests: Test that TGRAN*_2 fields are writable (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Allow userspace to write ID_AA64MMFR0_EL1.TGRAN*_2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: ptdump: Test PMD_TYPE_MASK for block mapping (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Provide 1 event counter on IMPDEF hardware (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Remap PMUv3 events onto hardware (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Advertise PMUv3 if IMPDEF traps are present (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Compute synthetic sysreg ESR for Apple PMUv3 traps (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Move PMUVer filtering into KVM code (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Use guard() to cleanup usage of arm_pmus_lock (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop kvm_arm_pmu_available static key (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Use a cpucap to determine if system supports FEAT_PMUv3 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Always support SW_INCR PMU event (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Compute PMCEID from arm_pmu's event bitmaps (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Fix documentation for KVM_CAP_ARM_WRITABLE_IMP_ID_REGS (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Copy MIDR_EL1 into hyp VM when it is writable (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Copy guest CTR_EL0 into hyp VM (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Fail KVM init if asking for NV without GICv3 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Allow userland to set VGIC maintenance IRQ (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Fold GICv3 host trapping requirements into guest setup (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Propagate used_lrs between L1 and L0 contexts (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Request vPE doorbell upon nested ERET to L2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Respect virtual HCR_EL2.TWx setting (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Add Maintenance Interrupt emulation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Handle L2->L1 transition on interrupt injection (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Nested GICv3 emulation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Sanitise ICH_HCR_EL2 accesses (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Plumb handling of GICv3 EL2 accesses (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Add ICH_*_EL2 registers to vpcu_sysreg (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Load timer before the GIC (Sebastian Ott) [RHEL-92805]
+- arm64: sysreg: Add layout for ICH_MISR_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64: sysreg: Add layout for ICH_VTR_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64: sysreg: Add layout for ICH_HCR_EL2 (Sebastian Ott) [RHEL-92805]
+- KVM: selftests: Add test for KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-92805]
+- smccc/kvm_guest: Enable errata based on implementation CPUs (Sebastian Ott) [RHEL-92805]
+- arm64: Make  _midr_in_range_list() an exported function (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Specify hypercall ABI for retrieving target implementations (Sebastian Ott) [RHEL-92805]
+- arm64: Modify _midr_range() functions to read MIDR/REVIDR internally (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Document ordering requirements for irqbypass (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: vgic-v4: Fall back to software irqbypass if LPI not found (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: vgic-v4: Only WARN for HW IRQ mismatch when unmapping vLPI (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: vgic-v4: Only attempt vLPI mapping for actual MSIs (Sebastian Ott) [RHEL-92805]
+- KVM: selftests: arm64: Test writes to MIDR,REVIDR,AIDR (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Allow userspace to change the implementation ID registers (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Load VPIDR_EL2 with the VM's MIDR_EL1 value (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Maintain per-VM copy of implementation ID regs (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Set HCR_EL2.TID1 unconditionally (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Advertise FEAT_ECV when possible (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Make ID_AA64MMFR4_EL1.NV_frac writable (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Allow userspace to limit NV support to nVHE (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Move NV-specific capping to idreg sanitisation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Enforce NV limits on a per-idregs basis (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Make ID_REG_LIMIT_FIELD_ENUM() more widely available (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Consolidate idreg callbacks (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Advertise NV2 in the boot messages (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Mark HCR.EL2.{NV*,AT} RES0 when ID_AA64MMFR4_EL1.NV_frac is 0 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Mark HCR.EL2.E2H RES0 when ID_AA64MMFR1_EL1.VH is zero (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Sebastian Ott) [RHEL-92805]
+- arm64: cpufeature: Handle NV_frac as a synonym of NV2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Eagerly switch ZCR_EL{1,2} (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Mark some header functions as inline (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Refactor exit handlers (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Refactor CPTR trap deactivation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop pkvm_mem_transition for host/hyp donations (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop pkvm_mem_transition for host/hyp sharing (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop pkvm_mem_transition for FF-A (Sebastian Ott) [RHEL-92805]
+- Revert "net: skb: introduce and use a single page frag cache" (Paolo Abeni) [RHEL-90322]
+- net: allow small head cache usage with large MAX_SKB_FRAGS values (Paolo Abeni) [RHEL-90322]
+- net: avoid unconditionally touching sk_tsflags on RX (Paolo Abeni) [RHEL-90322]
+- io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (Jeff Moyer) [RHEL-75487] {CVE-2025-21655}
+- io_uring/eventfd: abstract out ev_fd put helper (Jeff Moyer) [RHEL-75487]
+- xen: balloon: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
+- hv_balloon: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
+- balloon_compaction: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
+- meminfo: add a per node counter for balloon drivers (Nico Pache) [RHEL-70690]
+Resolves: RHEL-100002, RHEL-101330, RHEL-101712, RHEL-70690, RHEL-75487, RHEL-78258, RHEL-84459, RHEL-88996, RHEL-90322, RHEL-92271, RHEL-92805, RHEL-95382, RHEL-96261, RHEL-96626, RHEL-99473, RHEL-99477
+
 * Fri Jul 04 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-106.el10]
 - net: use sock_gen_put() when sk_state is TCP_TIME_WAIT (Paolo Abeni) [RHEL-96601]
 - block: use plug request list tail for one-shot backmerge attempt (Ming Lei) [RHEL-96294]
diff --git a/kernel.spec b/kernel.spec
index 5d9290d79..4fee5fa1b 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -162,15 +162,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 106
+%define pkgrelease 107
 %define kversion 6
-%define tarfile_release 6.12.0-106.el10
+%define tarfile_release 6.12.0-107.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 106%{?buildid}%{?dist}
+%define specrelease 107%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-106.el10
+%define kabiversion 6.12.0-107.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -3934,8 +3934,10 @@ fi\
 %files headers
 /usr/include/*
 %exclude %{_includedir}/cpufreq.h
+%if %{with_ynl}
 %exclude %{_includedir}/ynl
 %endif
+%endif
 
 %if %{with_cross_headers}
 %files cross-headers
@@ -4289,6 +4291,231 @@ fi\
 #
 #
 %changelog
+* Tue Jul 08 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-107.el10]
+- spec: fix spec warning for /usr/include/ynl (Alexandra Hájková) [RHEL-101712]
+- nvme: avoid creating multipath sysfs group under namespace path devices (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: make nvme_pci_npages_prp() __always_inline (Maurizio Lombardi) [RHEL-95382]
+- nvme: unblock ctrl state transition for firmware update (Maurizio Lombardi) [RHEL-95382]
+- nvmet-tcp: don't restore null sk_state_change (Maurizio Lombardi) [RHEL-95382]
+- nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS (Maurizio Lombardi) [RHEL-95382]
+- nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS (Maurizio Lombardi) [RHEL-95382]
+- nvme-tcp: fix premature queue removal and I/O failover (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: add quirks for WDC Blue SN550 15b7:5009 (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: add quirks for device 126f:1001 (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: fix queue unquiesce check on slot_reset (Maurizio Lombardi) [RHEL-95382]
+- nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-95382]
+- nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-95382]
+- nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-95382]
+- nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-95382]
+- nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-95382]
+- nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-95382]
+- nvme/ioctl: move fixed buffer lookup to nvme_uring_cmd_io() (Maurizio Lombardi) [RHEL-95382]
+- nvme/ioctl: move blk_mq_free_request() out of nvme_map_user_request() (Maurizio Lombardi) [RHEL-95382]
+- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-95382]
+- nvme: convert timeouts to secs_to_jiffies() (Maurizio Lombardi) [RHEL-95382]
+- nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-95382]
+- nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-95382]
+- nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-95382]
+- nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-95382]
+- nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-95382]
+- nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-95382]
+- nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-95382]
+- io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-95382]
+- sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CKI Backport Bot) [RHEL-101330] {CVE-2025-38089}
+- net: fix udp gso skb_segment after pull from frag_list (Paolo Abeni) [RHEL-96626]
+- net: ipv6: fix UDPv6 GSO segmentation with NAT (Paolo Abeni) [RHEL-96626]
+- softirq: use bit waits instead of var waits. (Phil Auld) [RHEL-96261]
+- sched: add wait_var_event_io() (Phil Auld) [RHEL-96261]
+- sched: Add wait/wake interface for variable updated under a lock. (Phil Auld) [RHEL-96261]
+- sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (Phil Auld) [RHEL-96261]
+- sched: Document wait_var_event() family of functions and wake_up_var() (Phil Auld) [RHEL-96261]
+- sched: Improve documentation for wake_up_bit/wait_on_bit family of functions (Phil Auld) [RHEL-96261]
+- sched: change wake_up_bit() and related function to expect unsigned long * (Phil Auld) [RHEL-96261]
+- net-timestamp: COMPLETION timestamp on packet tx completion (Petr Oros) [RHEL-100002]
+- net: skb: free up one bit in tx_flags (Petr Oros) [RHEL-100002]
+- selftests/bpf: Add simple bpf tests in the tx path for timestamping feature (Petr Oros) [RHEL-100002]
+- bpf: Support selective sampling for bpf timestamping (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_SENDMSG_CB callback (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_ACK_CB callback (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_SND_HW_CB callback (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_SND_SW_CB callback (Petr Oros) [RHEL-100002]
+- bpf: Add BPF_SOCK_OPS_TSTAMP_SCHED_CB callback (Petr Oros) [RHEL-100002]
+- net-timestamp: Prepare for isolating two modes of SO_TIMESTAMPING (Petr Oros) [RHEL-100002]
+- bpf: Disable unsafe helpers in TX timestamping callbacks (Petr Oros) [RHEL-100002]
+- bpf: Prevent unsafe access to the sock fields in the BPF timestamping callback (Petr Oros) [RHEL-100002]
+- bpf: Prepare the sock_ops ctx and call bpf prog for TX timestamping (Petr Oros) [RHEL-100002]
+- bpf: Add networking timestamping support to bpf_get/setsockopt() (Petr Oros) [RHEL-100002]
+- selftests: txtimestamp: add SCM_TS_OPT_ID test (Petr Oros) [RHEL-100002]
+- net_tstamp: add SCM_TS_OPT_ID for RAW sockets (Petr Oros) [RHEL-100002]
+- net_tstamp: add SCM_TS_OPT_ID to provide OPT_ID in control message (Petr Oros) [RHEL-100002]
+- selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (CKI Backport Bot) [RHEL-99477]
+- selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (CKI Backport Bot) [RHEL-99477]
+- netfilter: nf_set_pipapo_avx2: fix initial map fill (CKI Backport Bot) [RHEL-99477]
+- selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (CKI Backport Bot) [RHEL-99477]
+- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (CKI Backport Bot) [RHEL-99477]
+- netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (CKI Backport Bot) [RHEL-99477]
+- netfilter: nft_inner: Use nested-BH locking for nft_pcpu_tun_ctx (CKI Backport Bot) [RHEL-99473]
+- netfilter: nft_tunnel: fix geneve_opt dump (CKI Backport Bot) [RHEL-99473]
+- netfilter: nft_quota: match correctly when the quota just depleted (CKI Backport Bot) [RHEL-99473]
+- netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (CKI Backport Bot) [RHEL-99473]
+- netfilter: nf_tables: don't unregister hook when table is dormant (CKI Backport Bot) [RHEL-99473]
+- redhat/configs: enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-78258]
+- mm: pgtable: fix incorrect reclaim of non-empty PTE pages (Luiz Capitulino) [RHEL-78258]
+- x86: select ARCH_SUPPORTS_PT_RECLAIM if X86_64 (Luiz Capitulino) [RHEL-78258]
+- x86: mm: free page table pages by RCU instead of semi RCU (Luiz Capitulino) [RHEL-78258]
+- mm: pgtable: reclaim empty PTE page in madvise(MADV_DONTNEED) (Luiz Capitulino) [RHEL-78258]
+- mm: make zap_pte_range() handle full within-PMD range (Luiz Capitulino) [RHEL-78258]
+- mm: do_zap_pte_range: return any_skipped information to the caller (Luiz Capitulino) [RHEL-78258]
+- mm: zap_install_uffd_wp_if_needed: return whether uffd-wp pte has been re-installed (Luiz Capitulino) [RHEL-78258]
+- mm: skip over all consecutive none ptes in do_zap_pte_range() (Luiz Capitulino) [RHEL-78258]
+- mm: introduce do_zap_pte_range() (Luiz Capitulino) [RHEL-78258]
+- mm: introduce zap_nonpresent_ptes() (Luiz Capitulino) [RHEL-78258]
+- mm: userfaultfd: recheck dst_pmd entry in move_pages_pte() (Luiz Capitulino) [RHEL-78258]
+- mm: khugepaged: recheck pmd state in retract_page_tables() (Luiz Capitulino) [RHEL-78258]
+- docs/mm: add VMA locks documentation (Luiz Capitulino) [RHEL-78258]
+- redhat/configs: enable CONFIG_TCG_SVSM (Stefano Garzarella) [RHEL-92271]
+- x86/sev: Register tpm-svsm platform device (Stefano Garzarella) [RHEL-92271]
+- tpm: Add SNP SVSM vTPM driver (Stefano Garzarella) [RHEL-92271]
+- svsm: Add header with SVSM_VTPM_CMD helpers (Stefano Garzarella) [RHEL-92271]
+- x86/sev: Add SVSM vTPM probe/send_command functions (Stefano Garzarella) [RHEL-92271]
+- KVM: arm64: VHE: Synchronize CPTR trap deactivation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: VHE: Synchronize restore of host debug registers (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Explicitly treat routing entry type changes as changes (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: vgic-init: Plug vCPU vs. VGIC creation race (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Unmap vLPIs affected by changes to GSI routing information (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Resolve vLPI by host IRQ in vgic_v4_unset_forwarding() (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Protect vLPI translation with vgic_irq::irq_lock (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Use lock guard in vgic_v4_set_forwarding() (Sebastian Ott) [RHEL-92805]
+- arm64: Add override for MPAM (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop sort_memblock_regions() (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Switch to use hrtimer_setup() (Sebastian Ott) [RHEL-92805]
+- tools headers UAPI: Sync linux/kvm.h with the kernel sources (Sebastian Ott) [RHEL-92805]
+- KVM: selftests: Confirm exposing MTE_frac does not break migration (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Make MTE_frac masking conditional on MTE capability (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Expose MTE_frac so that it is visible to KVM (Sebastian Ott) [RHEL-92805]
+- redhat/configs: Enable CONFIG_AMPERE_ERRATUM_AC04_CPU_23 (Sebastian Ott) [RHEL-92805]
+- arm64: sysreg: Drag linux/kconfig.h to work around vdso build issue (Sebastian Ott) [RHEL-92805]
+- arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (Sebastian Ott) [RHEL-92805]
+- arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HFGWTR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HFGRTR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HFGITR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HDFGWTR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Add register fields for HDFGRTR2_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Allow userspace to request KVM_ARM_VCPU_EL2* (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Document NV caps and vcpu flags (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftests: Determine effective counter width in arch_timer_edge_cases (Sebastian Ott) [RHEL-84459 RHEL-92805]
+- KVM: arm64: selftests: Fix xVAL init in arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftests: Fix thread migration in arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftests: Fix help text for arch_timer_edge_cases (Sebastian Ott) [RHEL-92805]
+- smccc: kvm_guest: Align with DISCOVER_IMPL_CPUS ABI (Sebastian Ott) [RHEL-92805]
+- arm64: Rework checks for broken Cavium HW in the PI code (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftest: Don't try to disable AArch64 support (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Fix memory check in host_stage2_set_owner_locked() (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Kill HCRX_HOST_FLAGS (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Properly save/restore HCRX_EL2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Prevent userspace from disabling AArch64 support at any virtualisable EL (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Force HCR_EL2.xMO to 1 at all times in VHE mode (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() (Sebastian Ott) [RHEL-88996 RHEL-92805]
+- KVM: arm64: Use acquire/release to communicate FF-A version negotiation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Don't translate FAR if invalid/unsafe (Sebastian Ott) [RHEL-92805]
+- arm64: Convert HPFAR_EL2 to sysreg table (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Only read HPFAR_EL2 when value is architecturally valid (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Tear down vGIC on failed vCPU creation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Reload when resetting (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Reload when user modifies registers (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Fix SET_ONE_REG for vPMC regs (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Assume PMU presence in pmu-emul.c (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Create each pKVM hyp vcpu after its corresponding host vcpu (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Initialize HCRX_EL2 traps in pKVM (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Factor out setting HCRX_EL2 traps into separate function (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Count pKVM stage-2 usage in secondary pagetable stats (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Distinct pKVM teardown memcache for stage-2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Add flags to kvm_hyp_memcache (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: selftests: Test that TGRAN*_2 fields are writable (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Allow userspace to write ID_AA64MMFR0_EL1.TGRAN*_2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: ptdump: Test PMD_TYPE_MASK for block mapping (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Provide 1 event counter on IMPDEF hardware (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Remap PMUv3 events onto hardware (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Advertise PMUv3 if IMPDEF traps are present (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Compute synthetic sysreg ESR for Apple PMUv3 traps (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Move PMUVer filtering into KVM code (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Use guard() to cleanup usage of arm_pmus_lock (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop kvm_arm_pmu_available static key (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Use a cpucap to determine if system supports FEAT_PMUv3 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Always support SW_INCR PMU event (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Compute PMCEID from arm_pmu's event bitmaps (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Fix documentation for KVM_CAP_ARM_WRITABLE_IMP_ID_REGS (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Copy MIDR_EL1 into hyp VM when it is writable (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Copy guest CTR_EL0 into hyp VM (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Fail KVM init if asking for NV without GICv3 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Allow userland to set VGIC maintenance IRQ (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Fold GICv3 host trapping requirements into guest setup (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Propagate used_lrs between L1 and L0 contexts (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Request vPE doorbell upon nested ERET to L2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Respect virtual HCR_EL2.TWx setting (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Add Maintenance Interrupt emulation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Handle L2->L1 transition on interrupt injection (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Nested GICv3 emulation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Sanitise ICH_HCR_EL2 accesses (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Plumb handling of GICv3 EL2 accesses (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Add ICH_*_EL2 registers to vpcu_sysreg (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: nv: Load timer before the GIC (Sebastian Ott) [RHEL-92805]
+- arm64: sysreg: Add layout for ICH_MISR_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64: sysreg: Add layout for ICH_VTR_EL2 (Sebastian Ott) [RHEL-92805]
+- arm64: sysreg: Add layout for ICH_HCR_EL2 (Sebastian Ott) [RHEL-92805]
+- KVM: selftests: Add test for KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-92805]
+- smccc/kvm_guest: Enable errata based on implementation CPUs (Sebastian Ott) [RHEL-92805]
+- arm64: Make  _midr_in_range_list() an exported function (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Specify hypercall ABI for retrieving target implementations (Sebastian Ott) [RHEL-92805]
+- arm64: Modify _midr_range() functions to read MIDR/REVIDR internally (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Document ordering requirements for irqbypass (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: vgic-v4: Fall back to software irqbypass if LPI not found (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: vgic-v4: Only WARN for HW IRQ mismatch when unmapping vLPI (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: vgic-v4: Only attempt vLPI mapping for actual MSIs (Sebastian Ott) [RHEL-92805]
+- KVM: selftests: arm64: Test writes to MIDR,REVIDR,AIDR (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Allow userspace to change the implementation ID registers (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Load VPIDR_EL2 with the VM's MIDR_EL1 value (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Maintain per-VM copy of implementation ID regs (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Set HCR_EL2.TID1 unconditionally (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Advertise FEAT_ECV when possible (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Make ID_AA64MMFR4_EL1.NV_frac writable (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Allow userspace to limit NV support to nVHE (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Move NV-specific capping to idreg sanitisation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Enforce NV limits on a per-idregs basis (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Make ID_REG_LIMIT_FIELD_ENUM() more widely available (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Consolidate idreg callbacks (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Advertise NV2 in the boot messages (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Mark HCR.EL2.{NV*,AT} RES0 when ID_AA64MMFR4_EL1.NV_frac is 0 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Mark HCR.EL2.E2H RES0 when ID_AA64MMFR1_EL1.VH is zero (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Sebastian Ott) [RHEL-92805]
+- arm64: cpufeature: Handle NV_frac as a synonym of NV2 (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Eagerly switch ZCR_EL{1,2} (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Mark some header functions as inline (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Refactor exit handlers (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Refactor CPTR trap deactivation (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop pkvm_mem_transition for host/hyp donations (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop pkvm_mem_transition for host/hyp sharing (Sebastian Ott) [RHEL-92805]
+- KVM: arm64: Drop pkvm_mem_transition for FF-A (Sebastian Ott) [RHEL-92805]
+- Revert "net: skb: introduce and use a single page frag cache" (Paolo Abeni) [RHEL-90322]
+- net: allow small head cache usage with large MAX_SKB_FRAGS values (Paolo Abeni) [RHEL-90322]
+- net: avoid unconditionally touching sk_tsflags on RX (Paolo Abeni) [RHEL-90322]
+- io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (Jeff Moyer) [RHEL-75487] {CVE-2025-21655}
+- io_uring/eventfd: abstract out ev_fd put helper (Jeff Moyer) [RHEL-75487]
+- xen: balloon: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
+- hv_balloon: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
+- balloon_compaction: update the NR_BALLOON_PAGES state (Nico Pache) [RHEL-70690]
+- meminfo: add a per node counter for balloon drivers (Nico Pache) [RHEL-70690]
+
 * Fri Jul 04 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-106.el10]
 - net: use sock_gen_put() when sk_state is TCP_TIME_WAIT (Paolo Abeni) [RHEL-96601]
 - block: use plug request list tail for one-shot backmerge attempt (Ming Lei) [RHEL-96294]
diff --git a/sources b/sources
index 327fa353d..dba43ccc8 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-106.el10.tar.xz) = 98669fcd92cf98f2601004ef688258a00ec15066402b04dd5b99a3392421ce5bffba781210800f1528b1cccdeb0846cc5d3a9ba955aa110e3a0b945d6d6ca3a1
-SHA512 (kernel-abi-stablelists-6.12.0-106.el10.tar.xz) = 2755e0eb6dce95ad80d3db64a2f5bbcf6d75a1387432a51bcbe59bb3c3935b8763fa8ff03d86cf709c36129daccf0e4f6c590e0c66e6cc94da916b32213f7395
-SHA512 (kernel-kabi-dw-6.12.0-106.el10.tar.xz) = 60ebd251927400a2791c1844d03b746266ececf5424663b40ec83bd9b2495b3a5d3a56f00d41fc25757b9b6d5639406af26f1a104877c69785dbd17cc957484c
+SHA512 (linux-6.12.0-107.el10.tar.xz) = e77678a15032a4583d0cd816543356459236cc848dfd95e4f905e69cf863dbce501867330964a19d103d13c857da4fb17c6179f153935bfdfb589f82291dff79
+SHA512 (kernel-abi-stablelists-6.12.0-107.el10.tar.xz) = b4eecd6d9d7d9a94e7a7feab0b65aa6bb37827c90310044256ae800b076264801290b5c7f57866f9e6060980ef64e661f5ed9a3740a8dd1f1c767810dfc56cd7
+SHA512 (kernel-kabi-dw-6.12.0-107.el10.tar.xz) = 60ebd251927400a2791c1844d03b746266ececf5424663b40ec83bd9b2495b3a5d3a56f00d41fc25757b9b6d5639406af26f1a104877c69785dbd17cc957484c