diff --git a/Makefile.rhelver b/Makefile.rhelver
index b78649ab7..8f9764f57 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 3
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 215
+RHEL_RELEASE = 216
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index e80be1206..b80661543 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -436,6 +436,7 @@ CONFIG_ARM_SCMI_PERF_DOMAIN=y
 CONFIG_ARM_SCMI_POWER_CONTROL=y
 CONFIG_ARM_SCMI_POWER_DOMAIN=y
 CONFIG_ARM_SCMI_PROTOCOL=y
+CONFIG_ARM_SCMI_QUIRKS=y
 # CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
 CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
 # CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
@@ -1449,6 +1450,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 CONFIG_DEBUG_NOTIFIERS=y
 CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
@@ -2921,6 +2923,8 @@ CONFIG_IMX_IRQSTEER=y
 CONFIG_IMX_MBOX=m
 CONFIG_IMX_MU_MSI=m
 CONFIG_IMX_SCMI_BBM_EXT=y
+# CONFIG_IMX_SCMI_CPU_EXT is not set
+# CONFIG_IMX_SCMI_LMM_EXT is not set
 CONFIG_IMX_SCMI_MISC_DRV=y
 CONFIG_IMX_SCMI_MISC_EXT=y
 # CONFIG_IMX_SCU is not set
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index cb398591d..805a6d7a8 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -436,6 +436,7 @@ CONFIG_ARM_SCMI_PERF_DOMAIN=y
 CONFIG_ARM_SCMI_POWER_CONTROL=y
 CONFIG_ARM_SCMI_POWER_DOMAIN=y
 CONFIG_ARM_SCMI_PROTOCOL=y
+CONFIG_ARM_SCMI_QUIRKS=y
 # CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
 CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
 # CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
@@ -1449,6 +1450,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_DEBUG_OBJECTS_SELFTEST is not set
@@ -2905,6 +2907,8 @@ CONFIG_IMX_IRQSTEER=y
 CONFIG_IMX_MBOX=m
 CONFIG_IMX_MU_MSI=m
 CONFIG_IMX_SCMI_BBM_EXT=y
+# CONFIG_IMX_SCMI_CPU_EXT is not set
+# CONFIG_IMX_SCMI_LMM_EXT is not set
 CONFIG_IMX_SCMI_MISC_DRV=y
 CONFIG_IMX_SCMI_MISC_EXT=y
 # CONFIG_IMX_SCU is not set
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 06c054db1..233a14e92 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -434,6 +434,7 @@ CONFIG_ARM_SCMI_PERF_DOMAIN=y
 CONFIG_ARM_SCMI_POWER_CONTROL=y
 CONFIG_ARM_SCMI_POWER_DOMAIN=y
 CONFIG_ARM_SCMI_PROTOCOL=y
+CONFIG_ARM_SCMI_QUIRKS=y
 # CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
 CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
 # CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
@@ -1447,6 +1448,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 CONFIG_DEBUG_NOTIFIERS=y
 CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
@@ -2918,6 +2920,8 @@ CONFIG_IMX_IRQSTEER=y
 CONFIG_IMX_MBOX=m
 CONFIG_IMX_MU_MSI=m
 CONFIG_IMX_SCMI_BBM_EXT=y
+# CONFIG_IMX_SCMI_CPU_EXT is not set
+# CONFIG_IMX_SCMI_LMM_EXT is not set
 CONFIG_IMX_SCMI_MISC_DRV=y
 CONFIG_IMX_SCMI_MISC_EXT=y
 # CONFIG_IMX_SCU is not set
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index f5d99d435..1d52c4c6c 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -434,6 +434,7 @@ CONFIG_ARM_SCMI_PERF_DOMAIN=y
 CONFIG_ARM_SCMI_POWER_CONTROL=y
 CONFIG_ARM_SCMI_POWER_DOMAIN=y
 CONFIG_ARM_SCMI_PROTOCOL=y
+CONFIG_ARM_SCMI_QUIRKS=y
 # CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
 CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
 # CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
@@ -1447,6 +1448,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_DEBUG_OBJECTS_SELFTEST is not set
@@ -2902,6 +2904,8 @@ CONFIG_IMX_IRQSTEER=y
 CONFIG_IMX_MBOX=m
 CONFIG_IMX_MU_MSI=m
 CONFIG_IMX_SCMI_BBM_EXT=y
+# CONFIG_IMX_SCMI_CPU_EXT is not set
+# CONFIG_IMX_SCMI_LMM_EXT is not set
 CONFIG_IMX_SCMI_MISC_DRV=y
 CONFIG_IMX_SCMI_MISC_EXT=y
 # CONFIG_IMX_SCU is not set
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 0dab9edf1..be05f48f3 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -436,6 +436,7 @@ CONFIG_ARM_SCMI_PERF_DOMAIN=y
 CONFIG_ARM_SCMI_POWER_CONTROL=y
 CONFIG_ARM_SCMI_POWER_DOMAIN=y
 CONFIG_ARM_SCMI_PROTOCOL=y
+CONFIG_ARM_SCMI_QUIRKS=y
 # CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
 CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
 # CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
@@ -1451,6 +1452,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 CONFIG_DEBUG_NOTIFIERS=y
 CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
@@ -2962,6 +2964,8 @@ CONFIG_IMX_IRQSTEER=y
 CONFIG_IMX_MBOX=m
 CONFIG_IMX_MU_MSI=m
 CONFIG_IMX_SCMI_BBM_EXT=y
+# CONFIG_IMX_SCMI_CPU_EXT is not set
+# CONFIG_IMX_SCMI_LMM_EXT is not set
 CONFIG_IMX_SCMI_MISC_DRV=y
 CONFIG_IMX_SCMI_MISC_EXT=y
 # CONFIG_IMX_SCU is not set
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index 35e12059b..b7beadcb9 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -436,6 +436,7 @@ CONFIG_ARM_SCMI_PERF_DOMAIN=y
 CONFIG_ARM_SCMI_POWER_CONTROL=y
 CONFIG_ARM_SCMI_POWER_DOMAIN=y
 CONFIG_ARM_SCMI_PROTOCOL=y
+CONFIG_ARM_SCMI_QUIRKS=y
 # CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
 CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
 # CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
@@ -1451,6 +1452,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_DEBUG_OBJECTS_SELFTEST is not set
@@ -2946,6 +2948,8 @@ CONFIG_IMX_IRQSTEER=y
 CONFIG_IMX_MBOX=m
 CONFIG_IMX_MU_MSI=m
 CONFIG_IMX_SCMI_BBM_EXT=y
+# CONFIG_IMX_SCMI_CPU_EXT is not set
+# CONFIG_IMX_SCMI_LMM_EXT is not set
 CONFIG_IMX_SCMI_MISC_DRV=y
 CONFIG_IMX_SCMI_MISC_EXT=y
 # CONFIG_IMX_SCU is not set
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 316a03509..97b926cf5 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -434,6 +434,7 @@ CONFIG_ARM_SCMI_PERF_DOMAIN=y
 CONFIG_ARM_SCMI_POWER_CONTROL=y
 CONFIG_ARM_SCMI_POWER_DOMAIN=y
 CONFIG_ARM_SCMI_PROTOCOL=y
+CONFIG_ARM_SCMI_QUIRKS=y
 # CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
 CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
 # CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
@@ -1449,6 +1450,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 CONFIG_DEBUG_NOTIFIERS=y
 CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
@@ -2959,6 +2961,8 @@ CONFIG_IMX_IRQSTEER=y
 CONFIG_IMX_MBOX=m
 CONFIG_IMX_MU_MSI=m
 CONFIG_IMX_SCMI_BBM_EXT=y
+# CONFIG_IMX_SCMI_CPU_EXT is not set
+# CONFIG_IMX_SCMI_LMM_EXT is not set
 CONFIG_IMX_SCMI_MISC_DRV=y
 CONFIG_IMX_SCMI_MISC_EXT=y
 # CONFIG_IMX_SCU is not set
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index 9931ad1c6..241b17bec 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -434,6 +434,7 @@ CONFIG_ARM_SCMI_PERF_DOMAIN=y
 CONFIG_ARM_SCMI_POWER_CONTROL=y
 CONFIG_ARM_SCMI_POWER_DOMAIN=y
 CONFIG_ARM_SCMI_PROTOCOL=y
+CONFIG_ARM_SCMI_QUIRKS=y
 # CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
 CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
 # CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
@@ -1449,6 +1450,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_DEBUG_OBJECTS_SELFTEST is not set
@@ -2943,6 +2945,8 @@ CONFIG_IMX_IRQSTEER=y
 CONFIG_IMX_MBOX=m
 CONFIG_IMX_MU_MSI=m
 CONFIG_IMX_SCMI_BBM_EXT=y
+# CONFIG_IMX_SCMI_CPU_EXT is not set
+# CONFIG_IMX_SCMI_LMM_EXT is not set
 CONFIG_IMX_SCMI_MISC_DRV=y
 CONFIG_IMX_SCMI_MISC_EXT=y
 # CONFIG_IMX_SCU is not set
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 22267625f..f1e507dd5 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -1203,6 +1203,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 CONFIG_DEBUG_NOTIFIERS=y
 CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 6e494ba14..49b95f465 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -1203,6 +1203,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_DEBUG_OBJECTS_SELFTEST is not set
diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config
index 555ff37f1..91a8ba8a3 100644
--- a/kernel-riscv64-debug-rhel.config
+++ b/kernel-riscv64-debug-rhel.config
@@ -1213,6 +1213,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 CONFIG_DEBUG_NOTIFIERS=y
 CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
diff --git a/kernel-riscv64-rhel.config b/kernel-riscv64-rhel.config
index 2b809510e..65c9085c5 100644
--- a/kernel-riscv64-rhel.config
+++ b/kernel-riscv64-rhel.config
@@ -1213,6 +1213,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_DEBUG_OBJECTS_SELFTEST is not set
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index 9451f9163..012a65198 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -1209,6 +1209,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 CONFIG_DEBUG_NOTIFIERS=y
 CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 63da1543c..09a3ea96c 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -1209,6 +1209,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_DEBUG_OBJECTS_SELFTEST is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index d7ab6ec24..7e8afb4a9 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -1210,6 +1210,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 # CONFIG_DEBUG_MISC is not set
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
 # CONFIG_DEBUG_OBJECTS_SELFTEST is not set
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 88244158e..1f515ca65 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -1270,6 +1270,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 # CONFIG_DEBUG_NMI_SELFTEST is not set
 CONFIG_DEBUG_NOTIFIERS=y
@@ -1448,7 +1449,8 @@ CONFIG_DRIVER_PE_KUNIT_TEST=m
 # CONFIG_DRM_ACCEL_HABANALABS is not set
 # CONFIG_DRM_ACCEL_IVPU_DEBUG is not set
 CONFIG_DRM_ACCEL_IVPU=m
-# CONFIG_DRM_ACCEL_QAIC is not set
+# CONFIG_DRM_ACCEL_QAIC_DEBUG is not set
+CONFIG_DRM_ACCEL_QAIC=m
 CONFIG_DRM_ACCEL=y
 CONFIG_DRM_AMD_ACP=y
 # CONFIG_DRM_AMD_DC_HDCP is not set
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 5e6200039..3949e0858 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -1270,6 +1270,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NMI_SELFTEST is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
@@ -1440,7 +1441,8 @@ CONFIG_DRIVER_PE_KUNIT_TEST=m
 # CONFIG_DRM_ACCEL_HABANALABS is not set
 # CONFIG_DRM_ACCEL_IVPU_DEBUG is not set
 CONFIG_DRM_ACCEL_IVPU=m
-# CONFIG_DRM_ACCEL_QAIC is not set
+# CONFIG_DRM_ACCEL_QAIC_DEBUG is not set
+CONFIG_DRM_ACCEL_QAIC=m
 CONFIG_DRM_ACCEL=y
 CONFIG_DRM_AMD_ACP=y
 # CONFIG_DRM_AMD_DC_HDCP is not set
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index c010bd68a..c1301a98d 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -1272,6 +1272,7 @@ CONFIG_DEBUG_LOCK_ALLOC=y
 CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 CONFIG_DEBUG_MUTEXES=y
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 CONFIG_DEBUG_NET=y
 # CONFIG_DEBUG_NMI_SELFTEST is not set
 CONFIG_DEBUG_NOTIFIERS=y
@@ -1450,7 +1451,8 @@ CONFIG_DRIVER_PE_KUNIT_TEST=m
 # CONFIG_DRM_ACCEL_HABANALABS is not set
 # CONFIG_DRM_ACCEL_IVPU_DEBUG is not set
 CONFIG_DRM_ACCEL_IVPU=m
-# CONFIG_DRM_ACCEL_QAIC is not set
+# CONFIG_DRM_ACCEL_QAIC_DEBUG is not set
+CONFIG_DRM_ACCEL_QAIC=m
 CONFIG_DRM_ACCEL=y
 CONFIG_DRM_AMD_ACP=y
 # CONFIG_DRM_AMD_DC_HDCP is not set
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index aeef34686..c6e3a5624 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -1272,6 +1272,7 @@ CONFIG_DEBUG_MEMORY_INIT=y
 CONFIG_DEBUG_MISC=y
 # CONFIG_DEBUG_MUTEXES is not set
 # CONFIG_DEBUG_NET is not set
+# CONFIG_DEBUG_NET_SMALL_RTNL is not set
 # CONFIG_DEBUG_NMI_SELFTEST is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
 # CONFIG_DEBUG_OBJECTS is not set
@@ -1442,7 +1443,8 @@ CONFIG_DRIVER_PE_KUNIT_TEST=m
 # CONFIG_DRM_ACCEL_HABANALABS is not set
 # CONFIG_DRM_ACCEL_IVPU_DEBUG is not set
 CONFIG_DRM_ACCEL_IVPU=m
-# CONFIG_DRM_ACCEL_QAIC is not set
+# CONFIG_DRM_ACCEL_QAIC_DEBUG is not set
+CONFIG_DRM_ACCEL_QAIC=m
 CONFIG_DRM_ACCEL=y
 CONFIG_DRM_AMD_ACP=y
 # CONFIG_DRM_AMD_DC_HDCP is not set
diff --git a/kernel.changelog b/kernel.changelog
index 40c897183..87fc1986b 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,544 @@
+* Thu Mar 26 2026 Alexandra Hájková <ahajkova@redhat.com> [6.12.0-216.el10]
+- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
+- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
+- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
+- mpls: Protect net->mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
+- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
+- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
+- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
+- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
+- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
+- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
+- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
+- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
+- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
+- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
+- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
+- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
+- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
+- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
+- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
+- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
+- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
+- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
+- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
+- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
+- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
+- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
+- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
+- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
+- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
+- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Protect tbl->phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
+- neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
+- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
+- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
+- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
+- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
+- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
+- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
+- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
+- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
+- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
+- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
+- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
+- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
+- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
+- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
+- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
+- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
+- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
+- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
+- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
+- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
+- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
+- ipv6: Protect nh->f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
+- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
+- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
+- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Preallocate rt->fib6_nh->rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
+- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
+- net: Remove ->exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
+- geneve: Convert geneve_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- bareudp: Convert bareudp_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- bonding: Convert bond_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- bridge: Convert br_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- xfrm: Convert xfrmi_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert tunnel devices' ->exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- vxlan: Convert vxlan_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Convert nexthop_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- net: Add ->exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
+- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
+- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
+- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
+- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
+- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
+- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
+- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
+- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
+- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
+- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
+- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
+- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
+- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
+- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
+- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
+- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
+- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
+- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
+- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
+- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
+- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
+- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
+- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
+- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
+- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
+- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
+- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
+- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
+- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
+- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
+- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
+- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
+- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Move ops->validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
+- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
+- ipmr: use READ_ONCE() to read net->ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
+- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table->fib_seq (Antoine Tenart) [RHEL-150155]
+- ipv4: use READ_ONCE()/WRITE_ONCE() on net->ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
+- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops->fib_rules_seq (Antoine Tenart) [RHEL-150155]
+- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
+- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
+- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
+- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
+- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
+- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
+- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
+- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
+- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
+- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
+- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
+- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
+- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
+- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
+- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
+- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
+- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
+- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
+- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
+- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
+- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
+- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
+- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
+- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
+- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
+- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
+- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
+- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
+- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
+- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
+- cpuset: remove unused assignment to trialcs->partition_root_state (Waiman Long) [RHEL-113305]
+- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
+- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
+- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
+- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
+- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
+- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
+- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
+- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
+- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
+- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
+- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
+- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
+- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
+- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
+- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
+- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
+- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
+- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
+- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
+- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
+- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
+- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
+- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
+- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
+- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
+- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
+- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
+- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
+- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
+- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
+- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
+- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
+- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
+- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
+- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
+- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
+- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
+- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
+- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
+- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
+- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
+- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
+- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
+- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
+- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
+- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
+- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
+- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
+- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
+- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
+- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
+- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
+- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
+- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
+- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
+- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
+- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
+- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
+- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
+- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
+- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
+- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
+- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
+- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
+- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
+- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
+- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
+- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
+- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
+- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
+- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
+- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
+- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
+- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
+- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
+- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
+- arm_scmi: don't mess with ->d_parent->d_name (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
+- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
+- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
+- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
+- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
+- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
+- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
+- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
+- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
+- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
+- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
+- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
+- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
+- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
+- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
+- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
+- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
+- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
+- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
+- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
+- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
+- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
+- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
+- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
+- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
+- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
+- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
+- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
+- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
+- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
+- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
+- fgraph: Initialize ftrace_ops->private for function graph ops (Jerome Marchand) [RHEL-151695]
+- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
+- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
+- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
+- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
+- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
+- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
+- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
+- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
+- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
+- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
+- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
+- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
+- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
+- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
+- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
+- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
+- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
+- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
+- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
+- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
+- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
+- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
+- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
+- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
+- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
+- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
+- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
+- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
+- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
+- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
+- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
+- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
+- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
+- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
+- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
+- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
+- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
+- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
+- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
+- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
+- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
+- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
+- powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
+- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
+- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
+- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
+- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
+- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
+- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
+- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
+- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
+- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
+- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
+- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
+- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
+- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
+- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
+- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
+- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
+- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
+- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
+- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
+- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
+- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
+- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
+- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
+- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
+- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
+- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
+- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
+- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
+- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
+- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
+- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
+- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
+- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
+- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
+- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
+- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
+- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
+- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
+- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
+- mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
+- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
+- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
+- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
+- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
+- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
+- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
+- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
+- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
+- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
+- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}
+Resolves: RHEL-102523, RHEL-113305, RHEL-120360, RHEL-120700, RHEL-122816, RHEL-129782, RHEL-141540, RHEL-143323, RHEL-143907, RHEL-145265, RHEL-145590, RHEL-145815, RHEL-146632, RHEL-147272, RHEL-149722, RHEL-149753, RHEL-150117, RHEL-150155, RHEL-150231, RHEL-150249, RHEL-150408, RHEL-150482, RHEL-150879, RHEL-151695, RHEL-152652, RHEL-153273, RHEL-153616, RHEL-154184, RHEL-155353, RHEL-155383, RHEL-155461, RHEL-157932
+
 * Tue Mar 24 2026 Alexandra Hájková <ahajkova@redhat.com> [6.12.0-215.el10]
 - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT (Aristeu Rozanski) [RHEL-132213]
 - tcp: reclaim 8 bytes in struct request_sock_queue (Guillaume Nault) [RHEL-123211]
@@ -815,6 +1356,75 @@ Resolves: RHEL-138728, RHEL-151838, RHEL-152643, RHEL-153335
 - cache: sifive_ccache: Add ESWIN EIC7700 support (Jennifer Berringer) [RHEL-129062]
 Resolves: RHEL-129062, RHEL-135095, RHEL-145975, RHEL-150776, RHEL-97168
 
+* Tue Mar 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.5.1.el10_2]
+- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
+- powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
+- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
+- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
+- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
+- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
+- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
+- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
+- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
+- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
+- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
+- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
+- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
+- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
+- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
+- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
+- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
+- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
+- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
+- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
+- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
+- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
+- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
+- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
+- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
+- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
+- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
+- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
+- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
+- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
+- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
+- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
+- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
+- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
+- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
+- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
+- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
+- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
+- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
+- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
+- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
+- mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
+Resolves: RHEL-143323, RHEL-145265, RHEL-146632, RHEL-149722, RHEL-150117, RHEL-150249, RHEL-150408, RHEL-150482, RHEL-155461
+
+* Fri Mar 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.4.1.el10_2]
+- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
+- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
+- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
+- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
+- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
+- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
+- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
+- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
+- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
+- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}
+Resolves: RHEL-120700, RHEL-145815, RHEL-147272, RHEL-149753, RHEL-150231, RHEL-152652, RHEL-153273, RHEL-155353
+
 * Tue Mar 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.3.1.el10_2]
 - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
 - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908]
diff --git a/kernel.spec b/kernel.spec
index 5bc28d2f1..0a95b3664 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -176,15 +176,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 215
+%define pkgrelease 216
 %define kversion 6
-%define tarfile_release 6.12.0-215.el10
+%define tarfile_release 6.12.0-216.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 215%{?buildid}%{?dist}
+%define specrelease 216%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-215.el10
+%define kabiversion 6.12.0-216.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -1382,6 +1382,7 @@ analysing the logical and timing behavior of Linux.
 %package selftests-internal
 Summary: Kernel samples and selftests
 Requires: binutils, bpftool, iproute-tc, nmap-ncat, python3, fuse-libs, keyutils
+Provides: %{name}-selftests-internal-present
 %description selftests-internal
 Kernel sample programs and selftests.
 
@@ -1512,6 +1513,7 @@ Provides: %{name}%{?1:-%{1}}-modules-internal-uname-r = %{KVERREL}%{uname_suffix
 Requires: %{name}-uname-r = %{KVERREL}%{uname_suffix %{?1}}\
 Requires: %{name}%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{uname_suffix %{?1}}\
 Requires: %{name}%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1}}\
+Supplements: (%{name}-selftests-internal-present and %{name}-uname-r = %{KVERREL}%{uname_suffix %{?1}})\
 AutoReq: no\
 AutoProv: yes\
 %description %{?1:%{1}-}modules-internal\
@@ -4481,6 +4483,546 @@ fi\
 #
 #
 %changelog
+* Thu Mar 26 2026 Alexandra Hájková <ahajkova@redhat.com> [6.12.0-216.el10]
+- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
+- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
+- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
+- mpls: Protect net->mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
+- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
+- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
+- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
+- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
+- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
+- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
+- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
+- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
+- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
+- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
+- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
+- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
+- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
+- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
+- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
+- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
+- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
+- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
+- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
+- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
+- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
+- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
+- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
+- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
+- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
+- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Protect tbl->phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
+- neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
+- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
+- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
+- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
+- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
+- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
+- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
+- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
+- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
+- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
+- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
+- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
+- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
+- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
+- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
+- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
+- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
+- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
+- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
+- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
+- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
+- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
+- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
+- ipv6: Protect nh->f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
+- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
+- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
+- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Preallocate rt->fib6_nh->rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
+- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
+- net: Remove ->exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
+- geneve: Convert geneve_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- bareudp: Convert bareudp_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- bonding: Convert bond_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- bridge: Convert br_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- xfrm: Convert xfrmi_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert tunnel devices' ->exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- vxlan: Convert vxlan_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Convert nexthop_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
+- net: Add ->exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
+- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
+- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
+- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
+- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
+- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
+- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
+- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
+- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
+- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
+- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
+- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
+- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
+- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
+- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
+- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
+- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
+- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
+- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
+- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
+- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
+- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
+- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
+- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
+- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
+- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
+- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
+- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
+- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
+- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
+- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
+- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
+- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
+- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
+- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
+- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
+- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Move ops->validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
+- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
+- ipmr: use READ_ONCE() to read net->ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
+- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table->fib_seq (Antoine Tenart) [RHEL-150155]
+- ipv4: use READ_ONCE()/WRITE_ONCE() on net->ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
+- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops->fib_rules_seq (Antoine Tenart) [RHEL-150155]
+- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
+- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
+- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
+- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
+- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
+- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
+- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
+- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
+- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
+- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
+- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
+- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
+- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
+- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
+- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
+- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
+- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
+- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
+- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
+- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
+- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
+- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
+- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
+- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
+- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
+- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
+- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
+- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
+- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
+- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
+- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
+- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
+- cpuset: remove unused assignment to trialcs->partition_root_state (Waiman Long) [RHEL-113305]
+- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
+- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
+- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
+- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
+- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
+- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
+- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
+- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
+- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
+- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
+- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
+- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
+- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
+- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
+- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
+- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
+- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
+- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
+- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
+- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
+- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
+- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
+- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
+- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
+- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
+- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
+- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
+- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
+- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
+- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
+- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
+- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
+- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
+- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
+- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
+- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
+- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
+- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
+- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
+- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
+- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
+- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
+- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
+- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
+- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
+- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
+- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
+- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
+- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
+- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
+- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
+- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
+- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
+- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
+- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
+- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
+- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
+- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
+- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
+- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
+- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
+- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
+- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
+- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
+- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
+- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
+- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
+- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
+- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
+- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
+- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
+- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
+- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
+- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
+- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
+- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
+- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
+- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
+- arm_scmi: don't mess with ->d_parent->d_name (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
+- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
+- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
+- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
+- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
+- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
+- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
+- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
+- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
+- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
+- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
+- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
+- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
+- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
+- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
+- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
+- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
+- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
+- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
+- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
+- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
+- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
+- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
+- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
+- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
+- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
+- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
+- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
+- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
+- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
+- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
+- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
+- fgraph: Initialize ftrace_ops->private for function graph ops (Jerome Marchand) [RHEL-151695]
+- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
+- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
+- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
+- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
+- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
+- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
+- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
+- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
+- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
+- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
+- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
+- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
+- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
+- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
+- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
+- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
+- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
+- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
+- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
+- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
+- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
+- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
+- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
+- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
+- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
+- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
+- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
+- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
+- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
+- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
+- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
+- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
+- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
+- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
+- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
+- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
+- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
+- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
+- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
+- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
+- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
+- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
+- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
+- powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
+- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
+- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
+- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
+- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
+- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
+- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
+- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
+- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
+- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
+- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
+- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
+- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
+- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
+- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
+- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
+- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
+- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
+- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
+- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
+- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
+- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
+- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
+- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
+- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
+- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
+- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
+- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
+- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
+- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
+- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
+- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
+- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
+- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
+- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
+- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
+- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
+- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
+- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
+- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
+- mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
+- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
+- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
+- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
+- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
+- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
+- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
+- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
+- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
+- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
+- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
+- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
+- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}
+
 * Tue Mar 24 2026 Alexandra Hájková <ahajkova@redhat.com> [6.12.0-215.el10]
 - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT (Aristeu Rozanski) [RHEL-132213]
 - tcp: reclaim 8 bytes in struct request_sock_queue (Guillaume Nault) [RHEL-123211]
diff --git a/sources b/sources
index 129952e0f..d0b1a72e2 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-215.el10.tar.xz) = 916bac1d1c37506566b5573d220a84ed0a90bbe354318229599fedf83e1c5c306f82f3a8a2dd3f38a3ec20725cb63ddcd640d78ecefc3507e141968ddb56937d
-SHA512 (kernel-abi-stablelists-6.12.0-215.el10.tar.xz) = 334ca80b226df9d8c356445ae6522996e9aebfc778a2e099bbe32fc5995d2301ec646f69dcc9a4e45fc93aa117753fea418f5e774ca9cd94e351a94d08c8c2e7
-SHA512 (kernel-kabi-dw-6.12.0-215.el10.tar.xz) = e81b8cd9f08c77147d95b281f43f38af27f378a2fcb7811923244a50ffc9ca3286f9f5ae496f6448152d45d37afb66e56a542a2ea5ca93c624bcb2c02ac1d619
+SHA512 (linux-6.12.0-216.el10.tar.xz) = 6b51512f1d8b8aa2a0776d489b4399c871bd48adf862e5180c005ba6d7ad65a3b80c898e92616f81d067770584427c7e53cf670a32b509f6fca746763afa5ca6
+SHA512 (kernel-abi-stablelists-6.12.0-216.el10.tar.xz) = 456a8e02ff6086157a538557ff4c762790102b48d08176d009b8bb4505b771e5faa89b51308030c8a0f2df5a955fa20c636450c3cef5483024920f56e9a25be1
+SHA512 (kernel-kabi-dw-6.12.0-216.el10.tar.xz) = e81b8cd9f08c77147d95b281f43f38af27f378a2fcb7811923244a50ffc9ca3286f9f5ae496f6448152d45d37afb66e56a542a2ea5ca93c624bcb2c02ac1d619