diff --git a/Makefile.rhelver b/Makefile.rhelver
index 7321411c7..51b8b4d1e 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 0
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 53
+RHEL_RELEASE = 54
 
 #
 # RHEL_REBASE_NUM
diff --git a/gating.yaml b/gating.yaml
index a35b75c3f..3239293cb 100644
--- a/gating.yaml
+++ b/gating.yaml
@@ -23,3 +23,4 @@ rules:
   - !PassingTestCaseRule {test_case_name: s1-aws-ci_aarch64.brew-build.tier1.functional}
   - !PassingTestCaseRule {test_case_name: s1-azure-ci_x86_64.brew-build.tier1.functional}
   - !PassingTestCaseRule {test_case_name: s1-azure-ci_aarch64.brew-build.tier1.functional}
+  - !PassingTestCaseRule {test_case_name: s1-gcp-ci.brew-build.tier1.functional}
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index 08f2d37e4..ecd576177 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -2970,7 +2970,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 716e4e305..e8cd0f378 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -2954,7 +2954,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-aarch64-automotive-debug-rhel.config b/kernel-aarch64-automotive-debug-rhel.config
index 8f842cce0..e8801a51c 100644
--- a/kernel-aarch64-automotive-debug-rhel.config
+++ b/kernel-aarch64-automotive-debug-rhel.config
@@ -3167,7 +3167,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
 # CONFIG_INTEL_MEI is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_MEI_WDT is not set
diff --git a/kernel-aarch64-automotive-rhel.config b/kernel-aarch64-automotive-rhel.config
index 61d3f6a21..d34cb0ba4 100644
--- a/kernel-aarch64-automotive-rhel.config
+++ b/kernel-aarch64-automotive-rhel.config
@@ -3151,7 +3151,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
 # CONFIG_INTEL_MEI is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_MEI_WDT is not set
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 5296090c5..5aed2be5f 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -2967,7 +2967,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 060d856a3..947e295f3 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -2951,7 +2951,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 707b75b48..61716d4ea 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -3011,7 +3011,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index a5aa568a8..bb28f1d0c 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -2995,7 +2995,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index ccd796095..5c672b7fb 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -3008,7 +3008,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index 28db512b4..b75288519 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -2992,7 +2992,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index aaa18f030..b5d961ca9 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -2636,7 +2636,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 8b794dc05..36543c2f1 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -2620,7 +2620,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index b550f3cc5..a57b0b094 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -2620,7 +2620,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 76bb31869..aecb26e59 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -2604,7 +2604,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 32a8ea683..eea09a17e 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -2611,7 +2611,6 @@ CONFIG_INTEL_IOMMU_PERF_EVENTS=y
 # CONFIG_INTEL_LDMA is not set
 CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
-# CONFIG_INTEL_MEI_PXP is not set
 # CONFIG_INTEL_MEI_TXE is not set
 # CONFIG_INTEL_MEI_VSC_HW is not set
 # CONFIG_INTEL_PLR_TPMI is not set
diff --git a/kernel-x86_64-automotive-debug-rhel.config b/kernel-x86_64-automotive-debug-rhel.config
index 5fa2143d0..d427f9108 100644
--- a/kernel-x86_64-automotive-debug-rhel.config
+++ b/kernel-x86_64-automotive-debug-rhel.config
@@ -1511,6 +1511,7 @@ CONFIG_DRM_I915_HEARTBEAT_INTERVAL=2500
 CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
 CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
 CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
+CONFIG_DRM_I915_PXP=y
 # CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
 CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
 # CONFIG_DRM_I915_SELFTEST is not set
@@ -2942,7 +2943,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
 # CONFIG_INTEL_MEI is not set
 # CONFIG_INTEL_MEI_ME is not set
-# CONFIG_INTEL_MEI_PXP is not set
+CONFIG_INTEL_MEI_PXP=m
 # CONFIG_INTEL_MEI_TXE is not set
 CONFIG_INTEL_MEI_VSC_HW=m
 CONFIG_INTEL_MEI_VSC=m
diff --git a/kernel-x86_64-automotive-rhel.config b/kernel-x86_64-automotive-rhel.config
index b10549ea6..0d6d1f9e4 100644
--- a/kernel-x86_64-automotive-rhel.config
+++ b/kernel-x86_64-automotive-rhel.config
@@ -1503,6 +1503,7 @@ CONFIG_DRM_I915_HEARTBEAT_INTERVAL=2500
 CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
 CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
 CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
+CONFIG_DRM_I915_PXP=y
 # CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
 CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
 # CONFIG_DRM_I915_SELFTEST is not set
@@ -2926,7 +2927,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
 # CONFIG_INTEL_MEI is not set
 # CONFIG_INTEL_MEI_ME is not set
-# CONFIG_INTEL_MEI_PXP is not set
+CONFIG_INTEL_MEI_PXP=m
 # CONFIG_INTEL_MEI_TXE is not set
 CONFIG_INTEL_MEI_VSC_HW=m
 CONFIG_INTEL_MEI_VSC=m
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index f52d340f4..2b675f867 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -1480,6 +1480,7 @@ CONFIG_DRM_I915=m
 CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
 CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
 CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
+CONFIG_DRM_I915_PXP=y
 # CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
 CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
 # CONFIG_DRM_I915_SELFTEST is not set
@@ -2835,7 +2836,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
 CONFIG_INTEL_MEI=m
 CONFIG_INTEL_MEI_ME=m
-# CONFIG_INTEL_MEI_PXP is not set
+CONFIG_INTEL_MEI_PXP=m
 # CONFIG_INTEL_MEI_TXE is not set
 CONFIG_INTEL_MEI_VSC_HW=m
 CONFIG_INTEL_MEI_VSC=m
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 2ca162323..5c230b5c7 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -1472,6 +1472,7 @@ CONFIG_DRM_I915=m
 CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
 CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
 CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
+CONFIG_DRM_I915_PXP=y
 # CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
 CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
 # CONFIG_DRM_I915_SELFTEST is not set
@@ -2819,7 +2820,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
 CONFIG_INTEL_MEI=m
 CONFIG_INTEL_MEI_ME=m
-# CONFIG_INTEL_MEI_PXP is not set
+CONFIG_INTEL_MEI_PXP=m
 # CONFIG_INTEL_MEI_TXE is not set
 CONFIG_INTEL_MEI_VSC_HW=m
 CONFIG_INTEL_MEI_VSC=m
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index dca9676a5..928ab361d 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -1482,6 +1482,7 @@ CONFIG_DRM_I915=m
 CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
 CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
 CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
+CONFIG_DRM_I915_PXP=y
 # CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
 CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
 # CONFIG_DRM_I915_SELFTEST is not set
@@ -2876,7 +2877,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
 CONFIG_INTEL_MEI=m
 CONFIG_INTEL_MEI_ME=m
-# CONFIG_INTEL_MEI_PXP is not set
+CONFIG_INTEL_MEI_PXP=m
 # CONFIG_INTEL_MEI_TXE is not set
 CONFIG_INTEL_MEI_VSC_HW=m
 CONFIG_INTEL_MEI_VSC=m
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 6a6666a0f..3d61e6262 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -1474,6 +1474,7 @@ CONFIG_DRM_I915=m
 CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
 CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
 CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
+CONFIG_DRM_I915_PXP=y
 # CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
 CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
 # CONFIG_DRM_I915_SELFTEST is not set
@@ -2860,7 +2861,7 @@ CONFIG_INTEL_MEI_GSC_PROXY=m
 # CONFIG_INTEL_MEI_HDCP is not set
 CONFIG_INTEL_MEI=m
 CONFIG_INTEL_MEI_ME=m
-# CONFIG_INTEL_MEI_PXP is not set
+CONFIG_INTEL_MEI_PXP=m
 # CONFIG_INTEL_MEI_TXE is not set
 CONFIG_INTEL_MEI_VSC_HW=m
 CONFIG_INTEL_MEI_VSC=m
diff --git a/kernel.changelog b/kernel.changelog
index 6dac47ad2..7709372d9 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,119 @@
+* Fri Feb 14 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-54.el10]
+- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-76120] {CVE-2024-56611}
+- Revert "redhat: gating.yaml: drop unstable test" (Jan Stancek)
+- nvme: remove multipath module parameter (Bryan Gurney) [RHEL-78133]
+- NFSD: Fix CB_GETATTR status fix (Olga Kornievskaia) [RHEL-56888]
+- irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (CKI Backport Bot) [RHEL-78517] {CVE-2024-57949}
+- erofs: promote to full support (Ian Kent) [RHEL-78322]
+- rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78388]
+- afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78388]
+- afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78388]
+- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78388]
+- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78388]
+- rxrpc: Improve setsockopt() handling of malformed user input (Marc Dionne) [RHEL-78388]
+- afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-78388]
+- afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78388]
+- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78152]
+- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78152]
+- smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78152]
+- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78152]
+- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78152]
+- cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78152]
+- smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-78152]
+- smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78152]
+- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78152]
+- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78152]
+- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78152]
+- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78152]
+- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78152]
+- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78152]
+- cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-78152]
+- smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-78152]
+- cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-78152]
+- smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-78152]
+- smb: fix bytes written value in /proc/fs/cifs/Stats (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-78152] {CVE-2024-54680}
+- smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig (Paulo Alcantara) [RHEL-78152]
+- smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-78152]
+- smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-78152]
+- cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-78152]
+- cifs: Fix rmdir failure due to ongoing I/O on deleted file (Paulo Alcantara) [RHEL-78152]
+- smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-78152]
+- smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-78152]
+- fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-78152]
+- fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-78152]
+- fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-78152]
+- cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-78152]
+- cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-78152]
+- cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-78152]
+- smb: Initialize cfid->tcon before performing network ops (Paulo Alcantara) [RHEL-78152] {CVE-2024-56729}
+- smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-78152] {CVE-2024-53176}
+- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-78152]
+- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
+- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-78152]
+- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
+- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-78152]
+- cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-78152]
+- cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-78152]
+- cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-78152]
+- cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-78152]
+- cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-78152]
+- cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-78152]
+- Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-78152]
+- smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-78152]
+- smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-78152]
+- smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-78152]
+- smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-78152] {CVE-2024-53177}
+- smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-78152] {CVE-2024-53178}
+- smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-78152]
+- smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-78152]
+- smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-78152]
+- smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-78152]
+- cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-78152]
+- CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-78152]
+- smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-78152]
+- fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-78152]
+- smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-78152]
+- smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-78152]
+- smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-78152]
+- cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-78152]
+- bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write (Viktor Malik) [RHEL-78209]
+- clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-77959]
+- clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-77959]
+- kasan: make kasan_record_aux_stack_noalloc() the default behaviour (Waiman Long) [RHEL-71050]
+- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74109] {CVE-2024-57888}
+- smb: client: fix double free of TCP_Server_Info::hostname (CKI Backport Bot) [RHEL-77236] {CVE-2025-21673}
+- arm64: Force CONFIG_ARCH_FORCE_MAX_ORDER of 4k kernel to 12 (Waiman Long) [RHEL-67530]
+- Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77048]
+- KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-44575]
+- KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-44575]
+- KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-44575]
+- KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-44575]
+- KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-44575]
+- ext4: force disable fscrypt feature (Brian Foster) [RHEL-64637]
+- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest (Paolo Bonzini) [RHEL-45114]
+- iommufd: Fix struct iommu_hwpt_pgfault init and padding (Eder Zulian) [RHEL-75944]
+- iommufd/fault: Use a separate spinlock to protect fault->deliver list (Eder Zulian) [RHEL-75944]
+- iommufd/fault: Destroy response and mutex in iommufd_fault_destroy() (Eder Zulian) [RHEL-75944]
+- iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Eder Zulian) [RHEL-75944]
+- iommu: iommufd: fix WARNING in iommufd_device_unbind (Eder Zulian) [RHEL-75944]
+- smb: client: fix use-after-free of signing key (CKI Backport Bot) [RHEL-76126] {CVE-2024-53179}
+- smb: client: fix NULL ptr deref in crypto_aead_setkey() (CKI Backport Bot) [RHEL-76124] {CVE-2024-53185}
+- redhat: kernel.spec: add ynl to kernel-tools (Jan Stancek) [RHEL-63081]
+- tools/net/ynl: ethtool: support spec load from install location (Jan Stancek) [RHEL-63081]
+- tools/net/ynl: add support for --family and --list-families (Jan Stancek) [RHEL-63081]
+- tools: ynl: add main install target (Jan Stancek) [RHEL-63081]
+- tools: ynl: add install target for generated content (Jan Stancek) [RHEL-63081]
+- tools: ynl: add initial pyproject.toml for packaging (Jan Stancek) [RHEL-63081]
+- tools: ynl: move python code to separate sub-directory (Jan Stancek) [RHEL-63081]
+Resolves: RHEL-44575, RHEL-45114, RHEL-56888, RHEL-63081, RHEL-64637, RHEL-67530, RHEL-71050, RHEL-74109, RHEL-75944, RHEL-76120, RHEL-76124, RHEL-76126, RHEL-77048, RHEL-77236, RHEL-77959, RHEL-78133, RHEL-78152, RHEL-78209, RHEL-78322, RHEL-78388, RHEL-78517
+
 * Tue Feb 11 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-53.el10]
 - libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-73893]
 - libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-73893]
diff --git a/kernel.spec b/kernel.spec
index a8ecec977..531618790 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -162,15 +162,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 53
+%define pkgrelease 54
 %define kversion 6
-%define tarfile_release 6.12.0-53.el10
+%define tarfile_release 6.12.0-54.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 53%{?buildid}%{?dist}
+%define specrelease 54%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-53.el10
+%define kabiversion 6.12.0-54.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -232,6 +232,8 @@ Summary: The Linux kernel
 %define with_libperf   %{?_without_libperf:   0} %{?!_without_libperf:   1}
 # tools
 %define with_tools     %{?_without_tools:     0} %{?!_without_tools:     1}
+# ynl
+%define with_ynl      %{?_without_ynl:      0} %{?!_without_ynl:      1}
 # kernel-debuginfo
 %define with_debuginfo %{?_without_debuginfo: 0} %{?!_without_debuginfo: 1}
 # kernel-abi-stablelists
@@ -773,6 +775,11 @@ BuildRequires: pciutils-devel
 BuildRequires: libnl3-devel
 %endif
 %endif
+
+%if %{with_tools} && %{with_ynl}
+BuildRequires: python3-pyyaml python3-jsonschema python3-pip python3-setuptools python3-wheel
+%endif
+
 %if %{with_tools} || %{signmodules} || %{signkernel}
 BuildRequires: openssl-devel
 %endif
@@ -3119,6 +3126,19 @@ chmod +x tools/perf/check-headers.sh
 %endif
 
 %if %{with_tools}
+
+%if %{with_ynl}
+pushd tools/net/ynl
+export PIP_CONFIG_FILE=/tmp/pip.config
+cat <<EOF > $PIP_CONFIG_FILE
+[install]
+no-index = true
+no-build-isolation = false
+EOF
+%{tools_make} %{?_smp_mflags} DESTDIR=$RPM_BUILD_ROOT install
+popd
+%endif
+
 %ifarch %{cpupowerarchs}
 # cpupower
 # make sure version-gen.sh is executable.
@@ -4047,6 +4067,12 @@ fi\
 %config(noreplace) %{_sysconfdir}/logrotate.d/kvm_stat
 %{_bindir}/page_owner_sort
 %{_bindir}/slabinfo
+%if %{with_ynl}
+%{_bindir}/ynl*
+%{_docdir}/ynl
+%{_datadir}/ynl
+%{python3_sitelib}/pyynl*
+%endif
 
 %if %{with_debuginfo}
 %files -f %{package_name}-tools-debuginfo.list -n %{package_name}-tools-debuginfo
@@ -4056,13 +4082,19 @@ fi\
 %files -n %{package_name}-tools-libs
 %{_libdir}/libcpupower.so.1
 %{_libdir}/libcpupower.so.0.0.1
+%endif
 
 %files -n %{package_name}-tools-libs-devel
+%ifarch %{cpupowerarchs}
 %{_libdir}/libcpupower.so
 %{_includedir}/cpufreq.h
 %{_includedir}/cpuidle.h
 %{_includedir}/powercap.h
 %endif
+%if %{with_ynl}
+%{_libdir}/libynl*
+%{_includedir}/ynl
+%endif
 
 %files -n rtla
 %{_bindir}/rtla
@@ -4281,6 +4313,121 @@ fi\
 #
 #
 %changelog
+* Fri Feb 14 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-54.el10]
+- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-76120] {CVE-2024-56611}
+- Revert "redhat: gating.yaml: drop unstable test" (Jan Stancek)
+- nvme: remove multipath module parameter (Bryan Gurney) [RHEL-78133]
+- NFSD: Fix CB_GETATTR status fix (Olga Kornievskaia) [RHEL-56888]
+- irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (CKI Backport Bot) [RHEL-78517] {CVE-2024-57949}
+- erofs: promote to full support (Ian Kent) [RHEL-78322]
+- rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78388]
+- afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78388]
+- afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78388]
+- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78388]
+- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78388]
+- rxrpc: Improve setsockopt() handling of malformed user input (Marc Dionne) [RHEL-78388]
+- afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-78388]
+- afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78388]
+- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78152]
+- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78152]
+- smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78152]
+- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78152]
+- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78152]
+- cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78152]
+- smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-78152]
+- smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78152]
+- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78152]
+- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78152]
+- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78152]
+- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78152]
+- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78152]
+- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78152]
+- cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-78152]
+- smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-78152]
+- cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-78152]
+- smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-78152]
+- smb: fix bytes written value in /proc/fs/cifs/Stats (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-78152] {CVE-2024-54680}
+- smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig (Paulo Alcantara) [RHEL-78152]
+- smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-78152]
+- smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-78152]
+- cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-78152]
+- cifs: Fix rmdir failure due to ongoing I/O on deleted file (Paulo Alcantara) [RHEL-78152]
+- smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-78152]
+- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-78152]
+- smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-78152]
+- fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-78152]
+- fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-78152]
+- fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-78152]
+- cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-78152]
+- cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-78152]
+- cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-78152]
+- smb: Initialize cfid->tcon before performing network ops (Paulo Alcantara) [RHEL-78152] {CVE-2024-56729}
+- smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-78152] {CVE-2024-53176}
+- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-78152]
+- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
+- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-78152]
+- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-78152]
+- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-78152]
+- cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-78152]
+- cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-78152]
+- cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-78152]
+- cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-78152]
+- cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-78152]
+- cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-78152]
+- Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-78152]
+- smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-78152]
+- smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-78152]
+- smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-78152]
+- smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-78152] {CVE-2024-53177}
+- smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-78152] {CVE-2024-53178}
+- smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-78152]
+- smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-78152]
+- smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-78152]
+- smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-78152]
+- cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-78152]
+- CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-78152]
+- smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-78152]
+- fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-78152]
+- smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-78152]
+- smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-78152]
+- smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-78152]
+- cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-78152]
+- bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write (Viktor Malik) [RHEL-78209]
+- clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-77959]
+- clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-77959]
+- kasan: make kasan_record_aux_stack_noalloc() the default behaviour (Waiman Long) [RHEL-71050]
+- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74109] {CVE-2024-57888}
+- smb: client: fix double free of TCP_Server_Info::hostname (CKI Backport Bot) [RHEL-77236] {CVE-2025-21673}
+- arm64: Force CONFIG_ARCH_FORCE_MAX_ORDER of 4k kernel to 12 (Waiman Long) [RHEL-67530]
+- Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77048]
+- KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-44575]
+- KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-44575]
+- KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-44575]
+- KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-44575]
+- KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-44575]
+- ext4: force disable fscrypt feature (Brian Foster) [RHEL-64637]
+- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest (Paolo Bonzini) [RHEL-45114]
+- iommufd: Fix struct iommu_hwpt_pgfault init and padding (Eder Zulian) [RHEL-75944]
+- iommufd/fault: Use a separate spinlock to protect fault->deliver list (Eder Zulian) [RHEL-75944]
+- iommufd/fault: Destroy response and mutex in iommufd_fault_destroy() (Eder Zulian) [RHEL-75944]
+- iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Eder Zulian) [RHEL-75944]
+- iommu: iommufd: fix WARNING in iommufd_device_unbind (Eder Zulian) [RHEL-75944]
+- smb: client: fix use-after-free of signing key (CKI Backport Bot) [RHEL-76126] {CVE-2024-53179}
+- smb: client: fix NULL ptr deref in crypto_aead_setkey() (CKI Backport Bot) [RHEL-76124] {CVE-2024-53185}
+- redhat: kernel.spec: add ynl to kernel-tools (Jan Stancek) [RHEL-63081]
+- tools/net/ynl: ethtool: support spec load from install location (Jan Stancek) [RHEL-63081]
+- tools/net/ynl: add support for --family and --list-families (Jan Stancek) [RHEL-63081]
+- tools: ynl: add main install target (Jan Stancek) [RHEL-63081]
+- tools: ynl: add install target for generated content (Jan Stancek) [RHEL-63081]
+- tools: ynl: add initial pyproject.toml for packaging (Jan Stancek) [RHEL-63081]
+- tools: ynl: move python code to separate sub-directory (Jan Stancek) [RHEL-63081]
+
 * Tue Feb 11 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-53.el10]
 - libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-73893]
 - libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-73893]
diff --git a/sources b/sources
index 69c161eca..bb19b027d 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-53.el10.tar.xz) = f9cbf228ce7f96cf0372bdde3277397a8299aec297e7aecb0671bc2b02910b027fec6fd70a980d59d032342ce94d6d09c401e5d013d5b678c91559c8217f4da2
-SHA512 (kernel-abi-stablelists-6.12.0-53.el10.tar.xz) = e81621b157fdbe034a07a6c1989bc972054a0dc23513e0fbf61e11dcaf2079ff4b2fcf0eacd26a7f0d9e89b2efb45dbfcb4291b609163412831de0707116e8d7
-SHA512 (kernel-kabi-dw-6.12.0-53.el10.tar.xz) = 7550a1ab641ce3f1c086092ae10cce3d017b3fa20cdf40a00c643de3d62fcfda576931a81e872ddf35c01d2c60d8e92fe525621eb429c04aa0ff7cc83b71d763
+SHA512 (linux-6.12.0-54.el10.tar.xz) = a3751e387ea8aa562b81e3e0e31b2ad757142ffc1a32740083887f120f1c1fbf43c3f64c9e4c8016052412f906756729bb04aafd942c4a025bdda9b938048518
+SHA512 (kernel-abi-stablelists-6.12.0-54.el10.tar.xz) = ebf1cfe226689763fae392d86d14dba246a534d892c57b6665228cb65be3fc5ef2e1df3674c7bfb69aaa93abae817e5c67b2a5b07b1cfaeeeb8e231455fe84ac
+SHA512 (kernel-kabi-dw-6.12.0-54.el10.tar.xz) = 0818d13d53225c079a7140fd45d4a1a6566bbc68700cdfc6bee1a02b6bee079fcc1317ae945d975e63aceee592a1072a957d806205def3f730539854a932dcc3