diff --git a/Makefile.rhelver b/Makefile.rhelver
index 2cb9e8b6d..468a937be 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 7
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 595
+RHEL_RELEASE = 596
 
 #
 # ZSTREAM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index 80eeb6d38..164ec5102 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -4436,6 +4436,7 @@ CONFIG_PCIE_PTM=y
 # CONFIG_PCIE_QCOM is not set
 CONFIG_PCIE_TEGRA194_HOST=y
 CONFIG_PCIE_TEGRA194=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 CONFIG_PCI_HISI=y
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index ec33f25fc..760f550f6 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -4414,6 +4414,7 @@ CONFIG_PCIE_PTM=y
 # CONFIG_PCIE_QCOM is not set
 CONFIG_PCIE_TEGRA194_HOST=y
 CONFIG_PCIE_TEGRA194=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 CONFIG_PCI_HISI=y
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index e7e8d20a4..9cc030d76 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -4434,6 +4434,7 @@ CONFIG_PCIE_PTM=y
 # CONFIG_PCIE_QCOM is not set
 CONFIG_PCIE_TEGRA194_HOST=y
 CONFIG_PCIE_TEGRA194=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 CONFIG_PCI_HISI=y
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index a42ff3d5d..991a61270 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -4412,6 +4412,7 @@ CONFIG_PCIE_PTM=y
 # CONFIG_PCIE_QCOM is not set
 CONFIG_PCIE_TEGRA194_HOST=y
 CONFIG_PCIE_TEGRA194=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 CONFIG_PCI_HISI=y
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 59f916e97..bec9fcd23 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -4515,6 +4515,7 @@ CONFIG_PCIE_PTM=y
 # CONFIG_PCIE_QCOM is not set
 CONFIG_PCIE_TEGRA194_HOST=y
 CONFIG_PCIE_TEGRA194=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 CONFIG_PCI_HISI=y
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index 80efdb366..8a82ea88a 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -4493,6 +4493,7 @@ CONFIG_PCIE_PTM=y
 # CONFIG_PCIE_QCOM is not set
 CONFIG_PCIE_TEGRA194_HOST=y
 CONFIG_PCIE_TEGRA194=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 CONFIG_PCI_HISI=y
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 06e5aa397..ae5535dfe 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -4513,6 +4513,7 @@ CONFIG_PCIE_PTM=y
 # CONFIG_PCIE_QCOM is not set
 CONFIG_PCIE_TEGRA194_HOST=y
 CONFIG_PCIE_TEGRA194=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 CONFIG_PCI_HISI=y
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index a908cca30..a452e5c81 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -4491,6 +4491,7 @@ CONFIG_PCIE_PTM=y
 # CONFIG_PCIE_QCOM is not set
 CONFIG_PCIE_TEGRA194_HOST=y
 CONFIG_PCIE_TEGRA194=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 CONFIG_PCI_HISI=y
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 165ba3ab3..83dbabe88 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -4038,6 +4038,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 CONFIG_PCIEPORTBUS=y
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 1fd0420b8..eaad31763 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -4018,6 +4018,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 CONFIG_PCIEPORTBUS=y
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index deeed9e82..addf3bc26 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -4028,6 +4028,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 # CONFIG_PCIEPORTBUS is not set
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index e66df2c6b..4aee81186 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -4008,6 +4008,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 # CONFIG_PCIEPORTBUS is not set
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 9654313fe..ab30a986e 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -4022,6 +4022,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 # CONFIG_PCIEPORTBUS is not set
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 3da097ad2..5a0de62ae 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -4276,6 +4276,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 CONFIG_PCIEPORTBUS=y
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index a2b4656b0..e85edc7fc 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -4256,6 +4256,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 CONFIG_PCIEPORTBUS=y
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index 113cd6969..94d0cc27f 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -4354,6 +4354,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 CONFIG_PCIEPORTBUS=y
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 8b8f46a87..f1020a1c0 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -4334,6 +4334,7 @@ CONFIG_PCIE_EDR=y
 # CONFIG_PCI_ENDPOINT_TEST is not set
 CONFIG_PCIEPORTBUS=y
 CONFIG_PCIE_PTM=y
+CONFIG_PCIE_TPH=y
 # CONFIG_PCIE_XILINX is not set
 # CONFIG_PCI_FTPCI100 is not set
 # CONFIG_PCI_HOST_GENERIC is not set
diff --git a/kernel.changelog b/kernel.changelog
index 0a7d755a9..8f4b2884e 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,225 @@
+* Thu Jun 26 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-596.el9]
+- x86/entry: Add __init to ia32_emulation_override_cmdline() (Michael Petlan) [RHEL-52969]
+- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size (Felix Maurer) [RHEL-83553]
+- selftests/bpf: Add launch time request to xdp_hw_metadata (Felix Maurer) [RHEL-83553]
+- selftests/bpf: xdp_hw_metadata reduce sleep interval (Felix Maurer) [RHEL-83553]
+- xsk: Add launch time hardware offload support to XDP Tx metadata (Felix Maurer) [RHEL-83553]
+- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-83543]
+- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-83543]
+- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-83543]
+- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-83543]
+- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-83543]
+- ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-83543]
+- ice: use DSN instead of PCI BDF for ice_adapter index (Petr Oros) [RHEL-83543]
+- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-83543]
+- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-83543]
+- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-83543]
+- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-83543]
+- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-83543]
+- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-83543]
+- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-83543]
+- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-83543]
+- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-83543]
+- ice: E825C PHY register cleanup (Petr Oros) [RHEL-83543]
+- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-83543]
+- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-83543]
+- ice: Add E830 checksum offload support (Petr Oros) [RHEL-83543]
+- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-83543]
+- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-83543]
+- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-83543]
+- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-83543]
+- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-83543]
+- ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-83543]
+- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-83543]
+- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-83543]
+- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-83543]
+- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-83543]
+- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-83543]
+- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-83543]
+- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-83543]
+- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-83543]
+- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-83543]
+- ice: support FW Recovery Mode (Petr Oros) [RHEL-83543]
+- ice: use string choice helpers (Petr Oros) [RHEL-83543]
+- ice: add fw and port health reporters (Petr Oros) [RHEL-83543]
+- ice: add recipe priority check in search (Petr Oros) [RHEL-83543]
+- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-83543]
+- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-83543]
+- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-83543]
+- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-83543]
+- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-83543]
+- ice: reduce size of queue context fields (Petr Oros) [RHEL-83543]
+- ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-83543]
+- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-83543]
+- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-83543]
+- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-83543]
+- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-83543]
+- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-83543]
+- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-83543]
+- ice: Unbind the workqueue (Petr Oros) [RHEL-83543]
+- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-83543]
+- ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-83543]
+- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-83543]
+- ice: Add support for persistent NAPI config (Petr Oros) [RHEL-83543]
+- ice: support optional flags in signature segment header (Petr Oros) [RHEL-83543]
+- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-83543]
+- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-83543]
+- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-83543]
+- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-83543]
+- virtchnl: fix m68k build. (Petr Oros) [RHEL-83543]
+- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-83543]
+- ice: Cleanup unused declarations (Petr Oros) [RHEL-83543]
+- ice: Use common error handling code in two functions (Petr Oros) [RHEL-83543]
+- ice: Make use of assign_bit() API (Petr Oros) [RHEL-83543]
+- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-83543]
+- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-83543]
+- ice: Implement ethtool reset support (Petr Oros) [RHEL-83543]
+- crypto: qat - switch to standard pattern for PCI IDs (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove BITS_IN_DWORD() (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove initialization in device class (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_c3xxx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove redundant prototypes in qat_c3xxx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_c62x (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove redundant prototypes in qat_c62x (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_dh895xcc (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove redundant prototypes in qat_dh895xcc (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_420xx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_4xxx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove access to parity register for QAT GEN4 (Vladis Dronov) [RHEL-72769]
+- crypto: qat - set parity error mask for qat_420xx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - optimize allocations for fw authentication (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove redundant FW image size check (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove unused members in suof structure (Vladis Dronov) [RHEL-72769]
+- crypto: qat - introduce fuse array (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add macro to write 64-bit values to registers (Vladis Dronov) [RHEL-72769]
+- crypto: qat - refactor service parsing logic (Vladis Dronov) [RHEL-72769]
+- crypto: qat - do not export adf_cfg_services (Vladis Dronov) [RHEL-72769]
+- crypto: qat - reorder objects in qat_common Makefile (Vladis Dronov) [RHEL-72769]
+- crypto: qat - fix object goals in Makefiles (Vladis Dronov) [RHEL-72769]
+- crypto: qat - set command ids as reserved (Vladis Dronov) [RHEL-72769]
+- crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-72769]
+- crypto: qat - replace deprecated PCI functions (Vladis Dronov) [RHEL-72769]
+- lib/string_choices: Rearrange functions in sorted order (Vladis Dronov) [RHEL-72769]
+- net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93133] {CVE-2025-22004}
+- PCI/MSI: Remove over-zealous hardware size check in pci_msix_validate_entries() (John W. Linville) [RHEL-89170]
+- scsi: smartpqi: Delete a stray tab in pqi_is_parity_write_stream() (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Update driver version to 2.1.34-035 (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Enhance WWID logging logic (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Add new PCI IDs (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Take drives offline when controller is offline (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Use is_kdump_kernel() to check for kdump (Don Brace) [RHEL-96280]
+- redhat/configs: Enable CONFIG_PCIE_TPH (Ivan Vecera) [RHEL-94976]
+- PCI/TPH: Restore TPH Requester Enable correctly (Ivan Vecera) [RHEL-94976]
+- PCI/TPH: Add TPH documentation (Ivan Vecera) [RHEL-94976]
+- PCI/TPH: Add Steering Tag support (Ivan Vecera) [RHEL-94976]
+- PCI: Add TLP Processing Hints (TPH) support (Ivan Vecera) [RHEL-94976]
+- net: ena: Support persistent per-NAPI config. (Dennis Chen) [RHEL-94832]
+- treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-94832]
+- net: ena: Fix incorrect indentation (Dennis Chen) [RHEL-94832]
+- net: ena: remove devm from ethtool (Dennis Chen) [RHEL-94832]
+- net: ena: Remove deadcode (Dennis Chen) [RHEL-94832]
+- net: ena: Remove autopolling mode (Dennis Chen) [RHEL-94832]
+- ena: Link queues to NAPIs (Dennis Chen) [RHEL-94832]
+- ena: Link IRQs to NAPI instances (Dennis Chen) [RHEL-94832]
+- locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long) [RHEL-87008]
+- ovl: remove unused forward declaration (Miklos Szeredi) [RHEL-83562]
+- ovl: don't allow datadir only (Miklos Szeredi) [RHEL-83562]
+- ovl: fail if trusted xattrs are needed but caller lacks permission (Miklos Szeredi) [RHEL-83562]
+- ovl: properly handle large files in ovl_security_fileattr (Miklos Szeredi) [RHEL-83562]
+- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (Miklos Szeredi) [RHEL-83562]
+- ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err (Miklos Szeredi) [RHEL-83562]
+- ima: detect changes to the backing overlay file (Miklos Szeredi) [RHEL-83562]
+- ovl: support encoding fid from inode with no alias (Miklos Szeredi) [RHEL-83562] {CVE-2025-21654}
+- ovl: pass realinode to ovl_encode_real_fh() instead of realdentry (Miklos Szeredi) [RHEL-83562]
+- ovl: fix encoding fid for lower only root (Miklos Szeredi) [RHEL-83562]
+- ovl: fix wrong lowerdir number check for parameter Opt_lowerdir (Miklos Szeredi) [RHEL-83562]
+- ovl: pass string to ovl_parse_layer() (Miklos Szeredi) [RHEL-83562]
+- ovl: fix dentry reference leak after changes to underlying layers (Miklos Szeredi) [RHEL-83562]
+- ovl: fix memory leak in ovl_parse_param() (Miklos Szeredi) [RHEL-83562]
+- ovl: fix misformatted comment (Miklos Szeredi) [RHEL-83562]
+- ovl: add support for appending lowerdirs one by one (Miklos Szeredi) [RHEL-83562]
+- ovl: refactor layer parsing helpers (Miklos Szeredi) [RHEL-83562]
+- ovl: store and show the user provided lowerdir mount option (Miklos Szeredi) [RHEL-83562]
+- ovl: remove unused code in lowerdir param parsing (Miklos Szeredi) [RHEL-83562]
+- ovl: do not encode lower fh with upper sb_writers held (Miklos Szeredi) [RHEL-83562]
+- ovl: do not open/llseek lower file with upper sb_writers held (Miklos Szeredi) [RHEL-83562]
+- ovl: reorder ovl_want_write() after ovl_inode_lock() (Miklos Szeredi) [RHEL-83562]
+- ovl: split ovl_want_write() into two helpers (Miklos Szeredi) [RHEL-83562]
+- fs: export mnt_{get,put}_write_access() to modules (Miklos Szeredi) [RHEL-83562]
+- ovl: add helper ovl_file_modified() (Miklos Szeredi) [RHEL-83562]
+- ovl: protect copying of realinode attributes to ovl inode (Miklos Szeredi) [RHEL-83562]
+- ovl: punt write aio completion to workqueue (Miklos Szeredi) [RHEL-83562]
+- ovl: propagate IOCB_APPEND flag on writes to realfile (Miklos Szeredi) [RHEL-83562]
+- ovl: use simpler function to convert iocb to rw flags (Miklos Szeredi) [RHEL-83562]
+- ovl: rely on SB_I_NOUMASK (Miklos Szeredi) [RHEL-83562]
+- ovl: temporarily disable appending lowedirs (Miklos Szeredi) [RHEL-83562]
+- ovl: fix regression in showing lowerdir mount option (Miklos Szeredi) [RHEL-83562]
+- ovl: fix regression in parsing of mount options with escaped comma (Miklos Szeredi) [RHEL-83562]
+- fs: factor out vfs_parse_monolithic_sep() helper (Miklos Szeredi) [RHEL-83562]
+- overlayfs: move xattr tables to .rodata (Miklos Szeredi) [RHEL-83562]
+- ovl: fix NULL pointer defer when encoding non-decodable lower fid (Miklos Szeredi) [RHEL-83562]
+- ovl: make use of ->layers safe in rcu pathwalk (Miklos Szeredi) [RHEL-83562]
+- ovl: fix file reference leak when submitting aio (Miklos Szeredi) [RHEL-83562]
+- overlayfs: set ctime when setting mtime and atime (Miklos Szeredi) [RHEL-83562]
+- ovl: fix incorrect fdput() on aio completion (Miklos Szeredi) [RHEL-83562]
+- ovl: use kiocb_{start,end}_write() helpers (Miklos Szeredi) [RHEL-83562]
+- ovl: make consistent use of OVL_FS() (Miklos Szeredi) [RHEL-83562]
+- ovl: auto generate uuid for new overlay filesystems (Miklos Szeredi) [RHEL-83562]
+- ovl: store persistent uuid/fsid with uuid=on (Miklos Szeredi) [RHEL-83562]
+- ovl: Handle verity during copy-up (Miklos Szeredi) [RHEL-83562]
+- ovl: Validate verity xattr when resolving lowerdata (Miklos Szeredi) [RHEL-83562]
+- ovl: Add framework for verity support (Miklos Szeredi) [RHEL-83562]
+- ovl: add support for unique fsid per instance (Miklos Szeredi) [RHEL-83562]
+- ovl: support encoding non-decodable file handles (Miklos Szeredi) [RHEL-83562]
+- ovl: Always reevaluate the file signature for IMA (Miklos Szeredi) [RHEL-83562]
+- overlayfs: convert to ctime accessor functions (Miklos Szeredi) [RHEL-83562]
+- ovl: move all parameter handling into params.{c,h} (Miklos Szeredi) [RHEL-83562]
+- ovl: reserve ability to reconfigure mount options with new mount api (Miklos Szeredi) [RHEL-83562]
+- ovl: modify layer parameter parsing (Miklos Szeredi) [RHEL-83562]
+- ovl: port to new mount api (Miklos Szeredi) [RHEL-83562]
+- ovl: factor out ovl_parse_options() helper (Miklos Szeredi) [RHEL-83562]
+- ovl: store enum redirect_mode in config instead of a string (Miklos Szeredi) [RHEL-83562]
+- ovl: pass ovl_fs to xino helpers (Miklos Szeredi) [RHEL-83562]
+- ovl: clarify ovl_get_root() semantics (Miklos Szeredi) [RHEL-83562]
+- ovl: negate the ofs->share_whiteout boolean (Miklos Szeredi) [RHEL-83562]
+- ovl: check type and offset of struct vfsmount in ovl_entry (Miklos Szeredi) [RHEL-83562]
+- overlayfs: Implement splice-read (Miklos Szeredi) [RHEL-83562]
+- ovl: check for ->listxattr() support (Miklos Szeredi) [RHEL-83562]
+- ovl: Kconfig: Fix spelling mistake "undelying" -> "underlying" (Miklos Szeredi) [RHEL-83562]
+- ovl: use inode instead of dentry where possible (Miklos Szeredi) [RHEL-83562]
+- ovl: Add comment on upperredirect reassignment (Miklos Szeredi) [RHEL-83562]
+- ovl: use plain list filler in indexdir and workdir cleanup (Miklos Szeredi) [RHEL-83562]
+- ovl: do not reconnect upper index records in ovl_indexdir_cleanup() (Miklos Szeredi) [RHEL-83562]
+- ovl: fix comment typos (Miklos Szeredi) [RHEL-83562]
+- ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Miklos Szeredi) [RHEL-83562]
+- ovl: Use "buf" flexible array for memcpy() destination (Miklos Szeredi) [RHEL-83562]
+- ovl: fix spelling mistakes (Miklos Szeredi) [RHEL-83562]
+- ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Miklos Szeredi) [RHEL-83562]
+- ovl: fix some kernel-doc comments (Miklos Szeredi) [RHEL-83562]
+- ovl: warn if trusted xattr creation fails (Miklos Szeredi) [RHEL-83562]
+- ovl: use kvalloc in xattr copy-up (Miklos Szeredi) [RHEL-83562]
+- ovl: skip checking lower file's i_writecount on truncate (Miklos Szeredi) [RHEL-83562]
+- ovl: relax lookup error on mismatch origin ftype (Miklos Szeredi) [RHEL-83562]
+- Revert "ovl: Add framework for verity support" (Miklos Szeredi) [RHEL-83562]
+- Revert "ovl: Validate verity xattr when resolving lowerdata" (Miklos Szeredi) [RHEL-83562]
+- Revert "ovl: Handle verity during copy-up" (Miklos Szeredi) [RHEL-83562]
+- emulex/benet: correct command version selection in be_cmd_get_stats() (Dennis Chen) [RHEL-72658]
+- emulex/benet: Annotate flash_cookie as nonstring (Dennis Chen) [RHEL-72658]
+- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Dennis Chen) [RHEL-72658]
+- be2net: fix potential memory leak in be_xmit() (Dennis Chen) [RHEL-72658]
+- be2net: Remove unused declarations (Dennis Chen) [RHEL-72658]
+- benet: fix return value check in be_lancer_xmit_workarounds() (Dennis Chen) [RHEL-72658]
+- be2net: Extend xmit workaround to BE3 chip (Dennis Chen) [RHEL-72658]
+- emulex/benet: clean up some inconsistent indenting (Dennis Chen) [RHEL-72658]
+- ethernet/emulex:fix repeated words in comments (Dennis Chen) [RHEL-72658]
+- scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-96744]
+- Revert "PCI: Wait for device readiness with Configuration RRS" (John W. Linville) [RHEL-90580]
+- Revert "PCI: Rename CRS Completion Status to RRS" (John W. Linville) [RHEL-90580]
+- xen/events: replace evtchn_rwlock with RCU (Frank Liang) [RHEL-91670]
+- platform/x86: ISST: Correct command storage data length (David Arcari) [RHEL-88232]
+Resolves: RHEL-52969, RHEL-72658, RHEL-72769, RHEL-83543, RHEL-83553, RHEL-83562, RHEL-87008, RHEL-88232, RHEL-89170, RHEL-90580, RHEL-91670, RHEL-93133, RHEL-94832, RHEL-94976, RHEL-96280, RHEL-96744
+
 * Mon Jun 23 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-595.el9]
 - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93466] {CVE-2023-52933}
 - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-83573]
diff --git a/kernel.spec b/kernel.spec
index 7ace3b339..9314d9446 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 595
+%define pkgrelease 596
 %define kversion 5
-%define tarfile_release 5.14.0-595.el9
+%define tarfile_release 5.14.0-596.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 595%{?buildid}%{?dist}
+%define specrelease 596%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-595.el9
+%define kabiversion 5.14.0-596.el9
 
 #
 # End of genspec.sh variables
@@ -3677,6 +3677,227 @@ fi
 #
 #
 %changelog
+* Thu Jun 26 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-596.el9]
+- x86/entry: Add __init to ia32_emulation_override_cmdline() (Michael Petlan) [RHEL-52969]
+- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size (Felix Maurer) [RHEL-83553]
+- selftests/bpf: Add launch time request to xdp_hw_metadata (Felix Maurer) [RHEL-83553]
+- selftests/bpf: xdp_hw_metadata reduce sleep interval (Felix Maurer) [RHEL-83553]
+- xsk: Add launch time hardware offload support to XDP Tx metadata (Felix Maurer) [RHEL-83553]
+- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-83543]
+- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-83543]
+- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-83543]
+- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-83543]
+- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-83543]
+- ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-83543]
+- ice: use DSN instead of PCI BDF for ice_adapter index (Petr Oros) [RHEL-83543]
+- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-83543]
+- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-83543]
+- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-83543]
+- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-83543]
+- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-83543]
+- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-83543]
+- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-83543]
+- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-83543]
+- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-83543]
+- ice: E825C PHY register cleanup (Petr Oros) [RHEL-83543]
+- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-83543]
+- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-83543]
+- ice: Add E830 checksum offload support (Petr Oros) [RHEL-83543]
+- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-83543]
+- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-83543]
+- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-83543]
+- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-83543]
+- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-83543]
+- ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-83543]
+- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-83543]
+- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-83543]
+- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-83543]
+- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-83543]
+- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-83543]
+- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-83543]
+- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-83543]
+- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-83543]
+- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-83543]
+- ice: support FW Recovery Mode (Petr Oros) [RHEL-83543]
+- ice: use string choice helpers (Petr Oros) [RHEL-83543]
+- ice: add fw and port health reporters (Petr Oros) [RHEL-83543]
+- ice: add recipe priority check in search (Petr Oros) [RHEL-83543]
+- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-83543]
+- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-83543]
+- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-83543]
+- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-83543]
+- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-83543]
+- ice: reduce size of queue context fields (Petr Oros) [RHEL-83543]
+- ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-83543]
+- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-83543]
+- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-83543]
+- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-83543]
+- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-83543]
+- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-83543]
+- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-83543]
+- ice: Unbind the workqueue (Petr Oros) [RHEL-83543]
+- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-83543]
+- ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-83543]
+- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-83543]
+- ice: Add support for persistent NAPI config (Petr Oros) [RHEL-83543]
+- ice: support optional flags in signature segment header (Petr Oros) [RHEL-83543]
+- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-83543]
+- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-83543]
+- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-83543]
+- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-83543]
+- virtchnl: fix m68k build. (Petr Oros) [RHEL-83543]
+- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-83543]
+- ice: Cleanup unused declarations (Petr Oros) [RHEL-83543]
+- ice: Use common error handling code in two functions (Petr Oros) [RHEL-83543]
+- ice: Make use of assign_bit() API (Petr Oros) [RHEL-83543]
+- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-83543]
+- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-83543]
+- ice: Implement ethtool reset support (Petr Oros) [RHEL-83543]
+- crypto: qat - switch to standard pattern for PCI IDs (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove BITS_IN_DWORD() (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove initialization in device class (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_c3xxx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove redundant prototypes in qat_c3xxx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_c62x (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove redundant prototypes in qat_c62x (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_dh895xcc (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove redundant prototypes in qat_dh895xcc (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_420xx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add shutdown handler to qat_4xxx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove access to parity register for QAT GEN4 (Vladis Dronov) [RHEL-72769]
+- crypto: qat - set parity error mask for qat_420xx (Vladis Dronov) [RHEL-72769]
+- crypto: qat - optimize allocations for fw authentication (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove redundant FW image size check (Vladis Dronov) [RHEL-72769]
+- crypto: qat - remove unused members in suof structure (Vladis Dronov) [RHEL-72769]
+- crypto: qat - introduce fuse array (Vladis Dronov) [RHEL-72769]
+- crypto: qat - add macro to write 64-bit values to registers (Vladis Dronov) [RHEL-72769]
+- crypto: qat - refactor service parsing logic (Vladis Dronov) [RHEL-72769]
+- crypto: qat - do not export adf_cfg_services (Vladis Dronov) [RHEL-72769]
+- crypto: qat - reorder objects in qat_common Makefile (Vladis Dronov) [RHEL-72769]
+- crypto: qat - fix object goals in Makefiles (Vladis Dronov) [RHEL-72769]
+- crypto: qat - set command ids as reserved (Vladis Dronov) [RHEL-72769]
+- crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-72769]
+- crypto: qat - replace deprecated PCI functions (Vladis Dronov) [RHEL-72769]
+- lib/string_choices: Rearrange functions in sorted order (Vladis Dronov) [RHEL-72769]
+- net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93133] {CVE-2025-22004}
+- PCI/MSI: Remove over-zealous hardware size check in pci_msix_validate_entries() (John W. Linville) [RHEL-89170]
+- scsi: smartpqi: Delete a stray tab in pqi_is_parity_write_stream() (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Update driver version to 2.1.34-035 (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Enhance WWID logging logic (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Add new PCI IDs (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Take drives offline when controller is offline (Don Brace) [RHEL-96280]
+- scsi: smartpqi: Use is_kdump_kernel() to check for kdump (Don Brace) [RHEL-96280]
+- redhat/configs: Enable CONFIG_PCIE_TPH (Ivan Vecera) [RHEL-94976]
+- PCI/TPH: Restore TPH Requester Enable correctly (Ivan Vecera) [RHEL-94976]
+- PCI/TPH: Add TPH documentation (Ivan Vecera) [RHEL-94976]
+- PCI/TPH: Add Steering Tag support (Ivan Vecera) [RHEL-94976]
+- PCI: Add TLP Processing Hints (TPH) support (Ivan Vecera) [RHEL-94976]
+- net: ena: Support persistent per-NAPI config. (Dennis Chen) [RHEL-94832]
+- treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-94832]
+- net: ena: Fix incorrect indentation (Dennis Chen) [RHEL-94832]
+- net: ena: remove devm from ethtool (Dennis Chen) [RHEL-94832]
+- net: ena: Remove deadcode (Dennis Chen) [RHEL-94832]
+- net: ena: Remove autopolling mode (Dennis Chen) [RHEL-94832]
+- ena: Link queues to NAPIs (Dennis Chen) [RHEL-94832]
+- ena: Link IRQs to NAPI instances (Dennis Chen) [RHEL-94832]
+- locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long) [RHEL-87008]
+- ovl: remove unused forward declaration (Miklos Szeredi) [RHEL-83562]
+- ovl: don't allow datadir only (Miklos Szeredi) [RHEL-83562]
+- ovl: fail if trusted xattrs are needed but caller lacks permission (Miklos Szeredi) [RHEL-83562]
+- ovl: properly handle large files in ovl_security_fileattr (Miklos Szeredi) [RHEL-83562]
+- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (Miklos Szeredi) [RHEL-83562]
+- ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err (Miklos Szeredi) [RHEL-83562]
+- ima: detect changes to the backing overlay file (Miklos Szeredi) [RHEL-83562]
+- ovl: support encoding fid from inode with no alias (Miklos Szeredi) [RHEL-83562] {CVE-2025-21654}
+- ovl: pass realinode to ovl_encode_real_fh() instead of realdentry (Miklos Szeredi) [RHEL-83562]
+- ovl: fix encoding fid for lower only root (Miklos Szeredi) [RHEL-83562]
+- ovl: fix wrong lowerdir number check for parameter Opt_lowerdir (Miklos Szeredi) [RHEL-83562]
+- ovl: pass string to ovl_parse_layer() (Miklos Szeredi) [RHEL-83562]
+- ovl: fix dentry reference leak after changes to underlying layers (Miklos Szeredi) [RHEL-83562]
+- ovl: fix memory leak in ovl_parse_param() (Miklos Szeredi) [RHEL-83562]
+- ovl: fix misformatted comment (Miklos Szeredi) [RHEL-83562]
+- ovl: add support for appending lowerdirs one by one (Miklos Szeredi) [RHEL-83562]
+- ovl: refactor layer parsing helpers (Miklos Szeredi) [RHEL-83562]
+- ovl: store and show the user provided lowerdir mount option (Miklos Szeredi) [RHEL-83562]
+- ovl: remove unused code in lowerdir param parsing (Miklos Szeredi) [RHEL-83562]
+- ovl: do not encode lower fh with upper sb_writers held (Miklos Szeredi) [RHEL-83562]
+- ovl: do not open/llseek lower file with upper sb_writers held (Miklos Szeredi) [RHEL-83562]
+- ovl: reorder ovl_want_write() after ovl_inode_lock() (Miklos Szeredi) [RHEL-83562]
+- ovl: split ovl_want_write() into two helpers (Miklos Szeredi) [RHEL-83562]
+- fs: export mnt_{get,put}_write_access() to modules (Miklos Szeredi) [RHEL-83562]
+- ovl: add helper ovl_file_modified() (Miklos Szeredi) [RHEL-83562]
+- ovl: protect copying of realinode attributes to ovl inode (Miklos Szeredi) [RHEL-83562]
+- ovl: punt write aio completion to workqueue (Miklos Szeredi) [RHEL-83562]
+- ovl: propagate IOCB_APPEND flag on writes to realfile (Miklos Szeredi) [RHEL-83562]
+- ovl: use simpler function to convert iocb to rw flags (Miklos Szeredi) [RHEL-83562]
+- ovl: rely on SB_I_NOUMASK (Miklos Szeredi) [RHEL-83562]
+- ovl: temporarily disable appending lowedirs (Miklos Szeredi) [RHEL-83562]
+- ovl: fix regression in showing lowerdir mount option (Miklos Szeredi) [RHEL-83562]
+- ovl: fix regression in parsing of mount options with escaped comma (Miklos Szeredi) [RHEL-83562]
+- fs: factor out vfs_parse_monolithic_sep() helper (Miklos Szeredi) [RHEL-83562]
+- overlayfs: move xattr tables to .rodata (Miklos Szeredi) [RHEL-83562]
+- ovl: fix NULL pointer defer when encoding non-decodable lower fid (Miklos Szeredi) [RHEL-83562]
+- ovl: make use of ->layers safe in rcu pathwalk (Miklos Szeredi) [RHEL-83562]
+- ovl: fix file reference leak when submitting aio (Miklos Szeredi) [RHEL-83562]
+- overlayfs: set ctime when setting mtime and atime (Miklos Szeredi) [RHEL-83562]
+- ovl: fix incorrect fdput() on aio completion (Miklos Szeredi) [RHEL-83562]
+- ovl: use kiocb_{start,end}_write() helpers (Miklos Szeredi) [RHEL-83562]
+- ovl: make consistent use of OVL_FS() (Miklos Szeredi) [RHEL-83562]
+- ovl: auto generate uuid for new overlay filesystems (Miklos Szeredi) [RHEL-83562]
+- ovl: store persistent uuid/fsid with uuid=on (Miklos Szeredi) [RHEL-83562]
+- ovl: Handle verity during copy-up (Miklos Szeredi) [RHEL-83562]
+- ovl: Validate verity xattr when resolving lowerdata (Miklos Szeredi) [RHEL-83562]
+- ovl: Add framework for verity support (Miklos Szeredi) [RHEL-83562]
+- ovl: add support for unique fsid per instance (Miklos Szeredi) [RHEL-83562]
+- ovl: support encoding non-decodable file handles (Miklos Szeredi) [RHEL-83562]
+- ovl: Always reevaluate the file signature for IMA (Miklos Szeredi) [RHEL-83562]
+- overlayfs: convert to ctime accessor functions (Miklos Szeredi) [RHEL-83562]
+- ovl: move all parameter handling into params.{c,h} (Miklos Szeredi) [RHEL-83562]
+- ovl: reserve ability to reconfigure mount options with new mount api (Miklos Szeredi) [RHEL-83562]
+- ovl: modify layer parameter parsing (Miklos Szeredi) [RHEL-83562]
+- ovl: port to new mount api (Miklos Szeredi) [RHEL-83562]
+- ovl: factor out ovl_parse_options() helper (Miklos Szeredi) [RHEL-83562]
+- ovl: store enum redirect_mode in config instead of a string (Miklos Szeredi) [RHEL-83562]
+- ovl: pass ovl_fs to xino helpers (Miklos Szeredi) [RHEL-83562]
+- ovl: clarify ovl_get_root() semantics (Miklos Szeredi) [RHEL-83562]
+- ovl: negate the ofs->share_whiteout boolean (Miklos Szeredi) [RHEL-83562]
+- ovl: check type and offset of struct vfsmount in ovl_entry (Miklos Szeredi) [RHEL-83562]
+- overlayfs: Implement splice-read (Miklos Szeredi) [RHEL-83562]
+- ovl: check for ->listxattr() support (Miklos Szeredi) [RHEL-83562]
+- ovl: Kconfig: Fix spelling mistake "undelying" -> "underlying" (Miklos Szeredi) [RHEL-83562]
+- ovl: use inode instead of dentry where possible (Miklos Szeredi) [RHEL-83562]
+- ovl: Add comment on upperredirect reassignment (Miklos Szeredi) [RHEL-83562]
+- ovl: use plain list filler in indexdir and workdir cleanup (Miklos Szeredi) [RHEL-83562]
+- ovl: do not reconnect upper index records in ovl_indexdir_cleanup() (Miklos Szeredi) [RHEL-83562]
+- ovl: fix comment typos (Miklos Szeredi) [RHEL-83562]
+- ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Miklos Szeredi) [RHEL-83562]
+- ovl: Use "buf" flexible array for memcpy() destination (Miklos Szeredi) [RHEL-83562]
+- ovl: fix spelling mistakes (Miklos Szeredi) [RHEL-83562]
+- ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Miklos Szeredi) [RHEL-83562]
+- ovl: fix some kernel-doc comments (Miklos Szeredi) [RHEL-83562]
+- ovl: warn if trusted xattr creation fails (Miklos Szeredi) [RHEL-83562]
+- ovl: use kvalloc in xattr copy-up (Miklos Szeredi) [RHEL-83562]
+- ovl: skip checking lower file's i_writecount on truncate (Miklos Szeredi) [RHEL-83562]
+- ovl: relax lookup error on mismatch origin ftype (Miklos Szeredi) [RHEL-83562]
+- Revert "ovl: Add framework for verity support" (Miklos Szeredi) [RHEL-83562]
+- Revert "ovl: Validate verity xattr when resolving lowerdata" (Miklos Szeredi) [RHEL-83562]
+- Revert "ovl: Handle verity during copy-up" (Miklos Szeredi) [RHEL-83562]
+- emulex/benet: correct command version selection in be_cmd_get_stats() (Dennis Chen) [RHEL-72658]
+- emulex/benet: Annotate flash_cookie as nonstring (Dennis Chen) [RHEL-72658]
+- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Dennis Chen) [RHEL-72658]
+- be2net: fix potential memory leak in be_xmit() (Dennis Chen) [RHEL-72658]
+- be2net: Remove unused declarations (Dennis Chen) [RHEL-72658]
+- benet: fix return value check in be_lancer_xmit_workarounds() (Dennis Chen) [RHEL-72658]
+- be2net: Extend xmit workaround to BE3 chip (Dennis Chen) [RHEL-72658]
+- emulex/benet: clean up some inconsistent indenting (Dennis Chen) [RHEL-72658]
+- ethernet/emulex:fix repeated words in comments (Dennis Chen) [RHEL-72658]
+- scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-96744]
+- Revert "PCI: Wait for device readiness with Configuration RRS" (John W. Linville) [RHEL-90580]
+- Revert "PCI: Rename CRS Completion Status to RRS" (John W. Linville) [RHEL-90580]
+- xen/events: replace evtchn_rwlock with RCU (Frank Liang) [RHEL-91670]
+- platform/x86: ISST: Correct command storage data length (David Arcari) [RHEL-88232]
+
 * Mon Jun 23 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-595.el9]
 - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93466] {CVE-2023-52933}
 - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-83573]
diff --git a/sources b/sources
index 3028c3edc..b889e55a1 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-595.el9.tar.xz) = 69f3329e0e4af6f4ebbbc6fbb5a92aacc1a514579eaa318c3089f80305ca33cd77f1d56a498237dc9e354ce7b46e956994fb98ac5189b55d3c40f83dfd2558c4
-SHA512 (kernel-abi-stablelists-5.14.0-595.el9.tar.bz2) = f27974380bbb401da7b6a51194a2c1fc1a161fb1f54e8c51bb931fedac62a9092650cabea80d2861fa3c5a127f05f8614472021e2ed438941c8bea605f0fbef2
-SHA512 (kernel-kabi-dw-5.14.0-595.el9.tar.bz2) = fdc1585f269b6aef07f21b0772899224a158799e77cc1d8cd4b143fc4d1aeaf3c0165be543c3f28c3cd4879160bdb7c16ad3382183d896136650e204fa50fe27
+SHA512 (linux-5.14.0-596.el9.tar.xz) = 38df2d6ddee601dcf9266599441ea7dbb76a51cde478f48bed01a790072fcaff421c5518820c6698b89ce4af5628c4a256b44f6caedf8f3dfc75162c9078e879
+SHA512 (kernel-abi-stablelists-5.14.0-596.el9.tar.bz2) = 94154798502ec31f20df0adfcb4f331659784f0a492626ef81f50c38d60213b53f02652f660afded2f54d2f8341bbeee4a7ce2adfea9fec33d83b0449ab86020
+SHA512 (kernel-kabi-dw-5.14.0-596.el9.tar.bz2) = fdc1585f269b6aef07f21b0772899224a158799e77cc1d8cd4b143fc4d1aeaf3c0165be543c3f28c3cd4879160bdb7c16ad3382183d896136650e204fa50fe27