kernel/kernel.spec

# All Global changes to build and install go here.
# Per the below section about __spec_install_pre, any rpm
# environment changes that affect %%install need to go
# here before the %%install macro is pre-built.

# Disable LTO in userspace packages.
%global _lto_cflags %{nil}

# Option to enable compiling with clang instead of gcc.
%bcond_with toolchain_clang

%if %{with toolchain_clang}
%global toolchain clang
%endif

# Compile the kernel with LTO (only supported when building with clang).
%bcond_with clang_lto

%if %{with clang_lto} && %{without toolchain_clang}
{error:clang_lto requires --with toolchain_clang}
%endif

# Cross compile on copr for arm
# See https://bugzilla.redhat.com/1879599
%if 0%{?_with_cross_arm:1}
%global _target_cpu armv7hl
%global _arch arm
%global _build_arch arm
%global _with_cross    1
%endif

# RPM macros strip everything in BUILDROOT, either with __strip
# or find-debuginfo.sh. Make use of __spec_install_post override
# and save/restore binaries we want to package as unstripped.
%define buildroot_unstripped %{_builddir}/root_unstripped
%define buildroot_save_unstripped() \
(cd %{buildroot}; cp -rav --parents -t %{buildroot_unstripped}/ %1 || true) \
%{nil}
%define __restore_unstripped_root_post \
    echo "Restoring unstripped artefacts %{buildroot_unstripped} -> %{buildroot}" \
    cp -rav %{buildroot_unstripped}/. %{buildroot}/ \
%{nil}

# The kernel's %%install section is special
# Normally the %%install section starts by cleaning up the BUILD_ROOT
# like so:
#
# %%__spec_install_pre %%{___build_pre}\
#     [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf "${RPM_BUILD_ROOT}"\
#     mkdir -p `dirname "$RPM_BUILD_ROOT"`\
#     mkdir "$RPM_BUILD_ROOT"\
# %%{nil}
#
# But because of kernel variants, the %%build section, specifically
# BuildKernel(), moves each variant to its final destination as the
# variant is built.  This violates the expectation of the %%install
# section.  As a result we snapshot the current env variables and
# purposely leave out the removal section.  All global wide changes
# should be added above this line otherwise the %%install section
# will not see them.
%global __spec_install_pre %{___build_pre}

# Replace '-' with '_' where needed so that variants can use '-' in
# their name.
%define uname_suffix %{lua:
	local flavour = rpm.expand('%{?1:+%{1}}')
	flavour = flavour:gsub('-', '_')
	if flavour ~= '' then
		print(flavour)
	end
}

# This returns the main kernel tied to a debug variant. For example,
# kernel-debug is the debug version of kernel, so we return an empty
# string. However, kernel-64k-debug is the debug version of kernel-64k,
# in this case we need to return "64k", and so on. This is used in
# macros below where we need this for some uname based requires.
%define uname_variant %{lua:
	local flavour = rpm.expand('%{?1:%{1}}')
	_, _, main, sub = flavour:find("(%w+)-(.*)")
	if main then
		print("+" .. main)
	end
}


# At the time of this writing (2019-03), RHEL8 packages use w2.xzdio
# compression for rpms (xz, level 2).
# Kernel has several large (hundreds of mbytes) rpms, they take ~5 mins
# to compress by single-threaded xz. Switch to threaded compression,
# and from level 2 to 3 to keep compressed sizes close to "w2" results.
#
# NB: if default compression in /usr/lib/rpm/redhat/macros ever changes,
# this one might need tweaking (e.g. if default changes to w3.xzdio,
# change below to w4T.xzdio):
#
# This is disabled on i686 as it triggers oom errors

%ifnarch i686
%define _binary_payload w3T.xzdio
%endif

Summary: The Linux kernel
%if 0%{?fedora}
%define secure_boot_arch x86_64
%else
%define secure_boot_arch x86_64 aarch64 s390x ppc64le
%endif

# Signing for secure boot authentication
%ifarch %{secure_boot_arch}
%global signkernel 1
%else
%global signkernel 0
%endif

# Sign modules on all arches
%global signmodules 1

# Compress modules only for architectures that build modules
%ifarch noarch
%global zipmodules 0
%else
%global zipmodules 1
%endif

%ifarch x86_64
%global efiuki 1
%else
%global efiuki 0
%endif

# Default compression algorithm
%global compression xz
%global compression_flags --compress
%global compext xz
%if %{zipmodules}
%global zipsed -e 's/\.ko$/\.ko.%compext/'
# for parallel xz processes, replace with 1 to go back to single process
%endif

%if 0%{?fedora}
%define primary_target fedora
%else
%define primary_target rhel
%endif

#
# genspec.sh variables
#

# Include Fedora files
%global include_fedora 0
# Include RHEL files
%global include_rhel 1
# Provide Patchlist.changelog file
%global patchlist_changelog 0
# Set debugbuildsenabled to 1 to build separate base and debug kernels
#  (on supported architectures). The kernel-debug-* subpackages will
#  contain the debug kernel.
# Set debugbuildsenabled to 0 to not build a separate debug kernel, but
#  to build the base kernel using the debug configuration. (Specifying
#  the --with-release option overrides this setting.)
%define debugbuildsenabled 1
# define buildid .local
%define specversion 5.14.0
%define patchversion 5.14
%define pkgrelease 578
%define kversion 5
%define tarfile_release 5.14.0-578.el9
# This is needed to do merge window version magic
%define patchlevel 14
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 578%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 5.14.0-578.el9

#
# End of genspec.sh variables
#

%define pkg_release %{specrelease}

# libexec dir is not used by the linker, so the shared object there
# should not be exported to RPM provides
%global __provides_exclude_from ^%{_libexecdir}/kselftests

# The following build options are enabled by default, but may become disabled
# by later architecture-specific checks. These can also be disabled by using
# --without <opt> in the rpmbuild command, or by forcing these values to 0.
#
# standard kernel
%define with_up        %{?_without_up:        0} %{?!_without_up:        1}
# kernel PAE (only valid for ARM (lpae))
%define with_pae       %{?_without_pae:       0} %{?!_without_pae:       1}
# kernel-debug
%define with_debug     %{?_without_debug:     0} %{?!_without_debug:     1}
# kernel-zfcpdump (s390 specific kernel for zfcpdump)
%define with_zfcpdump  %{?_without_zfcpdump:  0} %{?!_without_zfcpdump:  1}
# kernel-64k (aarch64 kernel with 64K page_size)
%define with_arm64_64k %{?_without_arm64_64k: 0} %{?!_without_arm64_64k: 1}
# kernel-rt (x86_64 and aarch64 only PREEMPT_RT enabled kernel)
%define with_realtime  %{?_without_realtime:  0} %{?!_without_realtime:  1}
# kernel-rt-64k (aarch64 RT kernel with 64K page_size)
%define with_realtime_arm64_64k %{?_without_realtime_arm64_64k: 0} %{?!_without_realtime_arm64_64k: 1}
# kernel-doc
%define with_doc       %{?_without_doc:       0} %{?!_without_doc:       1}
# kernel-headers
%define with_headers   %{?_without_headers:   0} %{?!_without_headers:   1}
%define with_cross_headers   %{?_without_cross_headers:   0} %{?!_without_cross_headers:   1}
# perf
%define with_perf      %{?_without_perf:      0} %{?!_without_perf:      1}
# tools
%define with_tools     %{?_without_tools:     0} %{?!_without_tools:     1}
# kernel-debuginfo
%define with_debuginfo %{?_without_debuginfo: 0} %{?!_without_debuginfo: 1}
# kernel-abi-stablelists
%define with_kernel_abi_stablelists %{?_without_kernel_abi_stablelists: 0} %{?!_without_kernel_abi_stablelists: 1}
# internal samples and selftests
%define with_selftests %{?_without_selftests: 0} %{?!_without_selftests: 1}
#
# Additional options for user-friendly one-off kernel building:
#
# Only build the base kernel (--with baseonly):
%define with_baseonly  %{?_with_baseonly:     1} %{?!_with_baseonly:     0}
# Only build the pae kernel (--with paeonly):
%define with_paeonly   %{?_with_paeonly:      1} %{?!_with_paeonly:      0}
# Only build the debug kernel (--with dbgonly):
%define with_dbgonly   %{?_with_dbgonly:      1} %{?!_with_dbgonly:      0}
# Only build the realtime kernel (--with rtonly):
%define with_rtonly    %{?_with_rtonly:       1} %{?!_with_rtonly:       0}
# Control whether we perform a compat. check against published ABI.
%define with_kabichk   %{?_without_kabichk:   0} %{?!_without_kabichk:   1}
# Temporarily disable kabi checks until RC.
%define with_kabichk 0
# Control whether we perform a compat. check against DUP ABI.
%define with_kabidupchk %{?_with_kabidupchk:  1} %{?!_with_kabidupchk:   0}
#
# Control whether to run an extensive DWARF based kABI check.
# Note that this option needs to have baseline setup in SOURCE300.
%define with_kabidwchk %{?_without_kabidwchk: 0} %{?!_without_kabidwchk: 1}
%define with_kabidw_base %{?_with_kabidw_base: 1} %{?!_with_kabidw_base: 0}
#
# Control whether to install the vdso directories.
%define with_vdso_install %{?_without_vdso_install: 0} %{?!_without_vdso_install: 1}
#
# should we do C=1 builds with sparse
%define with_sparse    %{?_with_sparse:       1} %{?!_with_sparse:       0}
#
# Cross compile requested?
%define with_cross    %{?_with_cross:         1} %{?!_with_cross:        0}
#
# build a release kernel on rawhide
%define with_release   %{?_with_release:      1} %{?!_with_release:      0}

# verbose build, i.e. no silent rules and V=1
%define with_verbose %{?_with_verbose:        1} %{?!_with_verbose:      0}

#
# check for mismatched config options
%define with_configchecks %{?_without_configchecks:        0} %{?!_without_configchecks:        1}

#
# gcov support
%define with_gcov %{?_with_gcov:1}%{?!_with_gcov:0}

#
# ipa_clone support
%define with_ipaclones %{?_without_ipaclones: 0} %{?!_without_ipaclones: 1}

# Want to build a vanilla kernel build without any non-upstream patches?
%define with_vanilla %{?_with_vanilla: 1} %{?!_with_vanilla: 0}

%if 0%{?fedora}
# Kernel headers are being split out into a separate package
%define with_headers 0
%define with_cross_headers 0
# no ipa_clone for now
%define with_ipaclones 0
# no stablelist
%define with_kernel_abi_stablelists 0
# Fedora builds these separately
%define with_perf 0
%define with_tools 0
%endif

%if %{with_verbose}
%define make_opts V=1
%else
%define make_opts -s
%endif

%if %{with toolchain_clang}
%ifarch s390x ppc64le
%global llvm_ias 0
%else
%global llvm_ias 1
%endif
%global clang_make_opts HOSTCC=clang CC=clang LLVM_IAS=%{llvm_ias}
%if %{with clang_lto}
%global clang_make_opts %{clang_make_opts} LD=ld.lld HOSTLD=ld.lld AR=llvm-ar NM=llvm-nm HOSTAR=llvm-ar HOSTNM=llvm-nm
%endif
%global make_opts %{make_opts} %{clang_make_opts}
# clang does not support the -fdump-ipa-clones option
%global with_ipaclones 0
%endif

# turn off debug kernel and kabichk for gcov builds
%if %{with_gcov}
%define with_debug 0
%define with_kabichk 0
%define with_kabidupchk 0
%define with_kabidwchk 0
%define with_kabidw_base 0
%define with_kernel_abi_stablelists 0
%endif

# turn off kABI DWARF-based check if we're generating the base dataset
%if %{with_kabidw_base}
%define with_kabidwchk 0
%endif

# kpatch_kcflags are extra compiler flags applied to base kernel
# -fdump-ipa-clones is enabled only for base kernels on selected arches
%if %{with_ipaclones}
%ifarch x86_64 ppc64le
%define kpatch_kcflags -fdump-ipa-clones
%else
%define with_ipaclones 0
%endif
%endif

%define make_target bzImage
%define image_install_path boot

%define KVERREL %{version}-%{release}.%{_target_cpu}
%define KVERREL_RE %(echo %KVERREL | sed 's/+/[+]/g')
%define hdrarch %_target_cpu
%define asmarch %_target_cpu

%if 0%{!?nopatches:1}
%define nopatches 0
%endif

%if %{with_vanilla}
%define nopatches 1
%endif

%if %{with_release}
%define debugbuildsenabled 1
%endif

%if !%{with_debuginfo}
%define _enable_debug_packages 0
%endif
%define debuginfodir /usr/lib/debug
# Needed because we override almost everything involving build-ids
# and debuginfo generation. Currently we rely on the old alldebug setting.
%global _build_id_links alldebug

# kernel PAE is only built on ARMv7
%ifnarch armv7hl
%define with_pae 0
%endif

# RT kernel is only built on x86_64 and aarch64
%ifnarch x86_64 aarch64
%define with_realtime 0
%endif

# if requested, only build base kernel
%if %{with_baseonly}
%define with_pae 0
%define with_debug 0
%define with_realtime 0
%define with_vdso_install 0
%define with_perf 0
%define with_tools 0
%define with_kernel_abi_stablelists 0
%define with_selftests 0
%define with_cross 0
%define with_cross_headers 0
%define with_ipaclones 0
%endif

# if requested, only build pae kernel
%if %{with_paeonly}
%define with_up 0
%define with_debug 0
%define with_realtime 0
%endif

# if requested, only build debug kernel
%if %{with_dbgonly}
%define with_up 0
%define with_realtime 0
%define with_vdso_install 0
%define with_perf 0
%define with_tools 0
%define with_kernel_abi_stablelists 0
%define with_selftests 0
%define with_cross 0
%define with_cross_headers 0
%define with_ipaclones 0
%endif

# if requested, only build realtime kernel
%if %{with_rtonly}
%define with_up 0
%define with_pae 0
%define with_debug 0
%define with_vdso_install 0
%define with_perf 0
%define with_tools 0
%define with_kernel_abi_stablelists 0
%define with_selftests 0
%define with_cross 0
%define with_cross_headers 0
%define with_ipaclones 0
%endif

# turn off kABI DUP check and DWARF-based check if kABI check is disabled
%if !%{with_kabichk}
%define with_kabidupchk 0
%define with_kabidwchk 0
%endif

%if %{with_vdso_install}
%define use_vdso 1
%endif

%ifnarch noarch
%define with_kernel_abi_stablelists 0
%endif

# Overrides for generic default options

# only package docs noarch
%ifnarch noarch
%define with_doc 0
%define doc_build_fail true
%endif

%if 0%{?fedora}
# don't do debug builds on anything but i686 and x86_64
%ifnarch i686 x86_64
%define with_debug 0
%endif
%endif

# don't build noarch kernels or headers (duh)
%ifarch noarch
%define with_up 0
%define with_realtime 0
%define with_headers 0
%define with_cross_headers 0
%define with_tools 0
%define with_perf 0
%define with_selftests 0
%define with_debug 0
%define all_arch_configs kernel-%{version}-*.config
%endif

# sparse blows up on ppc
%ifnarch ppc64le
%define with_sparse 0
%endif

# zfcpdump mechanism is s390 only
%ifnarch s390x
%define with_zfcpdump 0
%endif

# 64k variant only for aarch64
%ifnarch aarch64
%define with_arm64_64k 0
%define with_realtime_arm64_64k 0
%endif

%if 0%{?fedora}
# This is not for Fedora
%define with_zfcpdump 0
%endif

# Per-arch tweaks

%ifarch i686
%define asmarch x86
%define hdrarch i386
%define all_arch_configs kernel-%{version}-i?86*.config
%define kernel_image arch/x86/boot/bzImage
%endif

%ifarch x86_64
%define asmarch x86
%define all_arch_configs kernel-%{version}-x86_64*.config
%define kernel_image arch/x86/boot/bzImage
%endif

%ifarch ppc64le
%define asmarch powerpc
%define hdrarch powerpc
%define make_target vmlinux
%define kernel_image vmlinux
%define kernel_image_elf 1
%define use_vdso 0
%define all_arch_configs kernel-%{version}-ppc64le*.config
%endif

%ifarch s390x
%define asmarch s390
%define hdrarch s390
%define all_arch_configs kernel-%{version}-s390x.config
%define kernel_image arch/s390/boot/bzImage
%define vmlinux_decompressor arch/s390/boot/compressed/vmlinux
%endif

%ifarch %{arm}
%define all_arch_configs kernel-%{version}-arm*.config
%define skip_nonpae_vdso 1
%define asmarch arm
%define hdrarch arm
%define make_target bzImage
%define kernel_image arch/arm/boot/zImage
# http://lists.infradead.org/pipermail/linux-arm-kernel/2012-March/091404.html
%define kernel_mflags KALLSYMS_EXTRA_PASS=1
# we only build headers/perf/tools on the base arm arches
# just like we used to only build them on i386 for x86
%ifnarch armv7hl
%define with_headers 0
%define with_cross_headers 0
%endif
# These currently don't compile on armv7
%define with_selftests 0
%endif

%ifarch aarch64
%define all_arch_configs kernel-%{version}-aarch64*.config
%define asmarch arm64
%define hdrarch arm64
%define make_target vmlinuz.efi
%define kernel_image arch/arm64/boot/vmlinuz.efi
%endif

# Should make listnewconfig fail if there's config options
# printed out?
%if %{nopatches}
%define with_configchecks 0
%endif

# To temporarily exclude an architecture from being built, add it to
# %%nobuildarches. Do _NOT_ use the ExclusiveArch: line, because if we
# don't build kernel-headers then the new build system will no longer let
# us use the previous build of that package -- it'll just be completely AWOL.
# Which is a BadThing(tm).

# We only build kernel-headers on the following...
%if 0%{?fedora}
%define nobuildarches i386
%else
%define nobuildarches i386 i686 %{arm}
%endif

%ifarch %nobuildarches
# disable BuildKernel commands
%define with_up 0
%define with_debug 0
%define with_pae 0
%define with_zfcpdump 0
%define with_arm64_64k 0
%define with_realtime 0
%define with_realtime_arm64_64k 0

%define with_debuginfo 0
%define with_perf 0
%define with_tools 0
%define with_selftests 0
%define _enable_debug_packages 0
%endif

# Architectures we build tools/cpupower on
%if 0%{?fedora}
%define cpupowerarchs %{ix86} x86_64 ppc64le %{arm} aarch64
%else
%define cpupowerarchs i686 x86_64 ppc64le aarch64
%endif

%if 0%{?use_vdso}

%if 0%{?skip_nonpae_vdso}
%define _use_vdso 0
%else
%define _use_vdso 1
%endif

%else
%define _use_vdso 0
%endif

# If build of debug packages is disabled, we need to know if we want to create
# meta debug packages or not, after we define with_debug for all specific cases
# above. So this must be at the end here, after all cases of with_debug or not.
%define with_debug_meta 0
%if !%{debugbuildsenabled}
%if %{with_debug}
%define with_debug_meta 1
%endif
%define with_debug 0
%endif


#
# Packages that need to be installed before the kernel is, because the %%post
# scripts use them.
#
%define kernel_prereq  coreutils, systemd >= 203-2, /usr/bin/kernel-install
%define initrd_prereq  dracut >= 027


Name: kernel
License: ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-Clear AND GFDL-1.1-no-invariants-or-later AND GPL-1.0-or-later AND (GPL-1.0-or-later OR BSD-3-Clause) AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only OR Apache-2.0) AND (GPL-2.0-only OR BSD-2-Clause) AND (GPL-2.0-only OR BSD-3-Clause) AND (GPL-2.0-only OR CDDL-1.0) AND (GPL-2.0-only OR GFDL-1.1-no-invariants-or-later) AND (GPL-2.0-only OR GFDL-1.2-no-invariants-only) AND (GPL-2.0-only WITH Linux-syscall-note) AND GPL-2.0-or-later AND (GPL-2.0-or-later OR BSD-2-Clause) AND (GPL-2.0-or-later OR BSD-3-Clause) AND (GPL-2.0-or-later OR CC-BY-4.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND ISC AND LGPL-2.0-or-later AND (LGPL-2.0-or-later OR BSD-2-Clause) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND LGPL-2.1-only AND (LGPL-2.1-only OR BSD-2-Clause) AND (LGPL-2.1-only WITH Linux-syscall-note) AND LGPL-2.1-or-later AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND (Linux-OpenIB OR GPL-2.0-only) AND (Linux-OpenIB OR GPL-2.0-only OR BSD-2-Clause) AND Linux-man-pages-copyleft AND MIT AND (MIT OR GPL-2.0-only) AND (MIT OR GPL-2.0-or-later) AND (MIT OR LGPL-2.1-only) AND (MPL-1.1 OR GPL-2.0-only) AND (X11 OR GPL-2.0-only) AND (X11 OR GPL-2.0-or-later) AND Zlib
URL: https://www.kernel.org/
Version: %{specversion}
Release: %{pkg_release}
# DO NOT CHANGE THE 'ExclusiveArch' LINE TO TEMPORARILY EXCLUDE AN ARCHITECTURE BUILD.
# SET %%nobuildarches (ABOVE) INSTEAD
%if 0%{?fedora}
ExclusiveArch: noarch x86_64 s390x %{arm} aarch64 ppc64le
%else
ExclusiveArch: noarch i386 i686 x86_64 s390x %{arm} aarch64 ppc64le
%endif
ExclusiveOS: Linux
%ifnarch %{nobuildarches}
Requires: kernel-core-uname-r = %{KVERREL}
Requires: kernel-modules-uname-r = %{KVERREL}
Requires: kernel-modules-core-uname-r = %{KVERREL}
Provides: installonlypkg(kernel)
%endif


#
# List the packages used during the kernel build
#
BuildRequires: kmod, bash, coreutils, tar, git-core, which
BuildRequires: bzip2, xz, findutils, gzip, m4, perl-interpreter, perl-Carp, perl-devel, perl-generators, make, diffutils, gawk, %compression
BuildRequires: gcc, binutils, redhat-rpm-config, hmaccalc, bison, flex, gcc-c++
BuildRequires: net-tools, hostname, bc, elfutils-devel
BuildRequires: dwarves
BuildRequires: python3-devel
BuildRequires: gcc-plugin-devel
BuildRequires: kernel-rpm-macros >= 185-9
# glibc-static is required for a consistent build environment (specifically
# CONFIG_CC_CAN_LINK_STATIC=y).
BuildRequires: glibc-static
%if %{with_headers}
BuildRequires: rsync
%endif
%if %{with_doc}
BuildRequires: xmlto, asciidoc, python3-sphinx, python3-sphinx_rtd_theme, python3-pyyaml
%endif
%if %{with_sparse}
BuildRequires: sparse
%endif
%if %{with_perf}
BuildRequires: zlib-devel binutils-devel newt-devel perl(ExtUtils::Embed) bison flex xz-devel
BuildRequires: audit-libs-devel python3-setuptools
BuildRequires: java-devel
BuildRequires: libbpf-devel >= 0.6.0-1
BuildRequires: libbabeltrace-devel
BuildRequires: libtraceevent-devel
%ifnarch %{arm} s390x
BuildRequires: numactl-devel
%endif
%ifarch aarch64
BuildRequires: opencsd-devel >= 1.2.1
%endif
%endif
%if %{with_tools}
BuildRequires: gettext ncurses-devel
BuildRequires: libcap-devel libcap-ng-devel
# The following are rtla requirements
BuildRequires: python3-docutils
BuildRequires: libtraceevent-devel
BuildRequires: libtracefs-devel

%ifnarch s390x
BuildRequires: pciutils-devel
%endif
%ifarch i686 x86_64
BuildRequires: libnl3-devel
%endif
%endif
%if %{with_tools} || %{signmodules} || %{signkernel}
BuildRequires: openssl-devel
%endif
%if %{with_selftests}
BuildRequires: clang llvm fuse-devel zlib-devel binutils-devel python3-docutils
%ifarch x86_64
BuildRequires: lld
%endif
%ifnarch %{arm}
BuildRequires: numactl-devel
%endif
BuildRequires: libcap-devel libcap-ng-devel rsync libmnl-devel
%endif
BuildConflicts: rhbuildsys(DiskFree) < 500Mb
%if %{with_debuginfo}
BuildRequires: rpm-build, elfutils
BuildConflicts: rpm < 4.13.0.1-19
BuildConflicts: dwarves < 1.13
# Most of these should be enabled after more investigation
%undefine _include_minidebuginfo
%undefine _find_debuginfo_dwz_opts
%undefine _unique_build_ids
%undefine _unique_debug_names
%undefine _unique_debug_srcs
%undefine _debugsource_packages
%undefine _debuginfo_subpackages
# Remove -q option below to provide 'extracting debug info' messages
%global _find_debuginfo_opts -r -q
%global _missing_build_ids_terminate_build 1
%global _no_recompute_build_ids 1
%endif
%if %{with_kabidwchk} || %{with_kabidw_base}
BuildRequires: kabi-dw
%endif

%if %{signkernel}%{signmodules}
BuildRequires: openssl
%if %{signkernel}
# ELN uses Fedora signing process, so exclude
%if 0%{?rhel}%{?centos} && !0%{?eln}
BuildRequires: system-sb-certs
%endif
%ifarch x86_64 aarch64
BuildRequires: nss-tools
BuildRequires: pesign >= 0.10-4
%endif
%endif
%endif

%if %{with_cross}
BuildRequires: binutils-%{_build_arch}-linux-gnu, gcc-%{_build_arch}-linux-gnu
%define cross_opts CROSS_COMPILE=%{_build_arch}-linux-gnu-
%define __strip %{_build_arch}-linux-gnu-strip
%endif

# These below are required to build man pages
%if %{with_perf}
BuildRequires: xmlto
%endif
%if %{with_perf} || %{with_tools}
BuildRequires: asciidoc
%endif

%if %{with toolchain_clang}
BuildRequires: clang
%endif

%if %{with clang_lto}
BuildRequires: llvm
BuildRequires: lld
%endif

%if %{efiuki}
BuildRequires: dracut >= 057-79.git20241127.el9
# For dracut UEFI uki binaries
BuildRequires: binutils
# For the initrd
BuildRequires: lvm2
# For systemd-stub
BuildRequires: systemd-boot-unsigned
# For systemd-pcrphase
BuildRequires: systemd-udev >= 252-1
# For UKI kernel cmdline addons
BuildRequires: systemd-ukify
# For TPM operations in UKI initramfs
BuildRequires: tpm2-tools
# For UKI sb cert
%if 0%{?centos}
BuildRequires: centos-sb-certs >= 9.0-23
%else
BuildRequires: redhat-sb-certs >= 9.4-0.1
%endif
%endif

# Because this is the kernel, it's hard to get a single upstream URL
# to represent the base without needing to do a bunch of patching. This
# tarball is generated from a src-git tree. If you want to see the
# exact git commit you can run
#
# xzcat -qq ${TARBALL} | git get-tar-commit-id
Source0: linux-%{tarfile_release}.tar.xz

Source1: Makefile.rhelver
Source2: kernel.changelog

%if %{signkernel}

# Name of the packaged file containing signing key
%ifarch ppc64le
%define signing_key_filename kernel-signing-ppc.cer
%endif
%ifarch s390x
%define signing_key_filename kernel-signing-s390.cer
%endif

%define secureboot_ca_0 %{_datadir}/pki/sb-certs/secureboot-ca-%{_arch}.cer
%define secureboot_key_0 %{_datadir}/pki/sb-certs/secureboot-kernel-%{_arch}.cer

%if 0%{?centos}
%define pesign_name_0 centossecureboot201
%else
%ifarch x86_64 aarch64
%define pesign_name_0 redhatsecureboot501
%endif
%ifarch s390x
%define pesign_name_0 redhatsecureboot302
%endif
%ifarch ppc64le
%define pesign_name_0 redhatsecureboot701
%endif
%endif

# signkernel
%endif

Source20: mod-denylist.sh
Source21: mod-sign.sh
Source22: parallel_xz.sh

%define modsign_cmd %{SOURCE21}

%if 0%{?include_rhel}
Source23: x509.genkey.rhel

Source24: kernel-aarch64-rhel.config
Source25: kernel-aarch64-debug-rhel.config
Source26: mod-extra.list.rhel

Source27: kernel-ppc64le-rhel.config
Source28: kernel-ppc64le-debug-rhel.config
Source29: kernel-s390x-rhel.config
Source30: kernel-s390x-debug-rhel.config
Source31: kernel-s390x-zfcpdump-rhel.config
Source32: kernel-x86_64-rhel.config
Source33: kernel-x86_64-debug-rhel.config

Source34: filter-x86_64.sh.rhel
Source35: filter-armv7hl.sh.rhel
Source37: filter-aarch64.sh.rhel
Source38: filter-ppc64le.sh.rhel
Source39: filter-s390x.sh.rhel
Source40: filter-modules.sh.rhel

Source41: x509.genkey.centos
# ARM64 64K page-size kernel config
Source42: kernel-aarch64-64k-rhel.config
Source43: kernel-aarch64-64k-debug-rhel.config

Source44: kernel-x86_64-rt-rhel.config
Source45: kernel-x86_64-rt-debug-rhel.config
Source46: kernel-aarch64-rt-rhel.config
Source47: kernel-aarch64-rt-debug-rhel.config
Source48: kernel-aarch64-rt-64k-rhel.config
Source49: kernel-aarch64-rt-64k-debug-rhel.config
%endif

%if 0%{?include_fedora}
Source50: x509.genkey.fedora
Source51: mod-extra.list.fedora

Source52: kernel-aarch64-fedora.config
Source53: kernel-aarch64-debug-fedora.config
Source54: kernel-armv7hl-fedora.config
Source55: kernel-armv7hl-debug-fedora.config
Source56: kernel-armv7hl-lpae-fedora.config
Source57: kernel-armv7hl-lpae-debug-fedora.config
Source60: kernel-ppc64le-fedora.config
Source61: kernel-ppc64le-debug-fedora.config
Source62: kernel-s390x-fedora.config
Source63: kernel-s390x-debug-fedora.config
Source64: kernel-x86_64-fedora.config
Source65: kernel-x86_64-debug-fedora.config

Source67: filter-x86_64.sh.fedora
Source68: filter-armv7hl.sh.fedora
Source70: filter-aarch64.sh.fedora
Source71: filter-ppc64le.sh.fedora
Source72: filter-s390x.sh.fedora
Source73: filter-modules.sh.fedora
%endif

Source75: partial-kgcov-snip.config
Source80: generate_all_configs.sh
Source81: process_configs.sh

Source82: update_scripts.sh

Source84: mod-internal.list
Source85: mod-partner.list
Source86: mod-kvm.list

Source100: rheldup3.x509
Source101: rhelkpatch1.x509
Source102: rhelimaca1.x509
Source103: rhelima.x509
Source104: rhelima_centos.x509
Source105: nvidiagpuoot001.x509

%if 0%{?centos}
%define ima_signing_cert %{SOURCE104}
%else
%define ima_signing_cert %{SOURCE103}
%endif

%define ima_cert_name ima.cer

Source150: dracut-virt.conf

Source151: uki_create_addons.py
Source152: uki_addons.json

Source200: check-kabi

Source201: Module.kabi_aarch64
Source202: Module.kabi_ppc64le
Source203: Module.kabi_s390x
Source204: Module.kabi_x86_64

Source210: Module.kabi_dup_aarch64
Source211: Module.kabi_dup_ppc64le
Source212: Module.kabi_dup_s390x
Source213: Module.kabi_dup_x86_64

Source300: kernel-abi-stablelists-%{kabiversion}.tar.bz2
Source301: kernel-kabi-dw-%{kabiversion}.tar.bz2

# Sources for kernel-tools
Source2000: cpupower.service
Source2001: cpupower.config
Source2002: kvm_stat.logrotate

# Some people enjoy building customized kernels from the dist-git in Fedora and
# use this to override configuration options. One day they may all use the
# source tree, but in the mean time we carry this to support the legacy workflow
Source3000: merge.pl
Source3001: kernel-local
%if %{patchlist_changelog}
Source3002: Patchlist.changelog
%endif

Source4000: README.rst
Source4001: rpminspect.yaml
Source4002: gating.yaml

## Patches needed for building this package

%if !%{nopatches}

Patch1: patch-%{patchversion}-redhat.patch
%endif

# empty final patch to facilitate testing of kernel patches
Patch999999: linux-kernel-test.patch

# END OF PATCH DEFINITIONS

%description
The kernel meta package

#
# This macro does requires, provides, conflicts, obsoletes for a kernel package.
#	%%kernel_reqprovconf [-o] <subpackage>
# It uses any kernel_<subpackage>_conflicts and kernel_<subpackage>_obsoletes
# macros defined above.
#
%define kernel_reqprovconf(o) \
%if %{-o:0}%{!-o:1}\
Provides: kernel = %{specversion}-%{pkg_release}\
%endif\
Provides: kernel-%{_target_cpu} = %{specversion}-%{pkg_release}%{uname_suffix %{?1:%{1}}}\
Provides: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires(pre): %{kernel_prereq}\
Requires(pre): %{initrd_prereq}\
Requires(pre): ((linux-firmware >= 20150904-56.git6ebf5d57) if linux-firmware)\
Recommends: linux-firmware\
Requires(preun): systemd >= 200\
Conflicts: xfsprogs < 4.3.0-1\
Conflicts: xorg-x11-drv-vmmouse < 13.0.99\
%{expand:%%{?kernel%{?1:_%{1}}_conflicts:Conflicts: %%{kernel%{?1:_%{1}}_conflicts}}}\
%{expand:%%{?kernel%{?1:_%{1}}_obsoletes:Obsoletes: %%{kernel%{?1:_%{1}}_obsoletes}}}\
%{expand:%%{?kernel%{?1:_%{1}}_provides:Provides: %%{kernel%{?1:_%{1}}_provides}}}\
# We can't let RPM do the dependencies automatic because it'll then pick up\
# a correct but undesirable perl dependency from the module headers which\
# isn't required for the kernel proper to function\
AutoReq: no\
AutoProv: yes\
%{nil}


%package doc
Summary: Various documentation bits found in the kernel source
Group: Documentation
%description doc
This package contains documentation files from the kernel
source. Various bits of information about the Linux kernel and the
device drivers shipped with it are documented in these files.

You'll want to install this package if you need a reference to the
options that can be passed to Linux kernel modules at load time.


%package headers
Summary: Header files for the Linux kernel for use by glibc
Obsoletes: glibc-kernheaders < 3.0-46
Provides: glibc-kernheaders = 3.0-46
%description headers
Kernel-headers includes the C header files that specify the interface
between the Linux kernel and userspace libraries and programs.  The
header files define structures and constants that are needed for
building most standard programs and are also needed for rebuilding the
glibc package.

%package cross-headers
Summary: Header files for the Linux kernel for use by cross-glibc
%description cross-headers
Kernel-cross-headers includes the C header files that specify the interface
between the Linux kernel and userspace libraries and programs.  The
header files define structures and constants that are needed for
building most standard programs and are also needed for rebuilding the
cross-glibc package.


%package debuginfo-common-%{_target_cpu}
Summary: Kernel source files used by %{name}-debuginfo packages
Provides: installonlypkg(kernel)
%description debuginfo-common-%{_target_cpu}
This package is required by %{name}-debuginfo subpackages.
It provides the kernel source files common to all builds.

%if %{with_perf}
%package -n perf
Summary: Performance monitoring for the Linux kernel
Requires: bzip2
%description -n perf
This package contains the perf tool, which enables performance monitoring
of the Linux kernel.

%package -n perf-debuginfo
Summary: Debug information for package perf
Requires: %{name}-debuginfo-common-%{_target_cpu} = %{version}-%{release}
AutoReqProv: no
%description -n perf-debuginfo
This package provides debug information for the perf package.

# Note that this pattern only works right to match the .build-id
# symlinks because of the trailing nonmatching alternation and
# the leading .*, because of find-debuginfo.sh's buggy handling
# of matching the pattern against the symlinks file.
%{expand:%%global _find_debuginfo_opts %{?_find_debuginfo_opts} -p '.*%%{_bindir}/perf(\.debug)?|.*%%{_libexecdir}/perf-core/.*|.*%%{_libdir}/libperf-jvmti.so(\.debug)?|XXX' -o perf-debuginfo.list}

%package -n python3-perf
Summary: Python bindings for apps which will manipulate perf events
%description -n python3-perf
The python3-perf package contains a module that permits applications
written in the Python programming language to use the interface
to manipulate perf events.

%package -n python3-perf-debuginfo
Summary: Debug information for package perf python bindings
Requires: %{name}-debuginfo-common-%{_target_cpu} = %{version}-%{release}
AutoReqProv: no
%description -n python3-perf-debuginfo
This package provides debug information for the perf python bindings.

# the python_sitearch macro should already be defined from above
%{expand:%%global _find_debuginfo_opts %{?_find_debuginfo_opts} -p '.*%%{python3_sitearch}/perf.*so(\.debug)?|XXX' -o python3-perf-debuginfo.list}

%package -n libperf
Summary: The perf library from kernel source
%description -n libperf
This package contains the kernel source perf library.

%package -n libperf-devel
Summary: Developement files for the perf library from kernel source
Requires: libperf = %{version}-%{release}
%description -n libperf-devel
This package includes libraries and header files needed for development
of applications which use perf library from kernel source.

%package -n libperf-debuginfo
Summary: Debug information for package libperf
Group: Development/Debug
Requires: %{name}-debuginfo-common-%{_target_cpu} = %{version}-%{release}
AutoReqProv: no
%description -n libperf-debuginfo
This package provides debug information for the libperf package.

# Note that this pattern only works right to match the .build-id
# symlinks because of the trailing nonmatching alternation and
# the leading .*, because of find-debuginfo.sh's buggy handling
# of matching the pattern against the symlinks file.
%{expand:%%global _find_debuginfo_opts %{?_find_debuginfo_opts} -p '.*%%{_libdir}/libperf.so.*(\.debug)?|XXX' -o libperf-debuginfo.list}

# with_perf
%endif

%if %{with_tools}
%package -n kernel-tools
Summary: Assortment of tools for the Linux kernel
%ifarch %{cpupowerarchs}
Provides:  cpupowerutils = 1:009-0.6.p1
Obsoletes: cpupowerutils < 1:009-0.6.p1
Provides:  cpufreq-utils = 1:009-0.6.p1
Provides:  cpufrequtils = 1:009-0.6.p1
Obsoletes: cpufreq-utils < 1:009-0.6.p1
Obsoletes: cpufrequtils < 1:009-0.6.p1
Obsoletes: cpuspeed < 1:1.5-16
Requires: kernel-tools-libs = %{version}-%{release}
%endif
%define __requires_exclude ^%{_bindir}/python
%description -n kernel-tools
This package contains the tools/ directory from the kernel source
and the supporting documentation.

%package -n kernel-tools-libs
Summary: Libraries for the kernels-tools
%description -n kernel-tools-libs
This package contains the libraries built from the tools/ directory
from the kernel source.

%package -n kernel-tools-libs-devel
Summary: Assortment of tools for the Linux kernel
Requires: kernel-tools = %{version}-%{release}
%ifarch %{cpupowerarchs}
Provides:  cpupowerutils-devel = 1:009-0.6.p1
Obsoletes: cpupowerutils-devel < 1:009-0.6.p1
%endif
Requires: kernel-tools-libs = %{version}-%{release}
Provides: kernel-tools-devel
%description -n kernel-tools-libs-devel
This package contains the development files for the tools/ directory from
the kernel source.

%package -n kernel-tools-debuginfo
Summary: Debug information for package kernel-tools
Requires: %{name}-debuginfo-common-%{_target_cpu} = %{version}-%{release}
AutoReqProv: no
%description -n kernel-tools-debuginfo
This package provides debug information for package kernel-tools.

# Note that this pattern only works right to match the .build-id
# symlinks because of the trailing nonmatching alternation and
# the leading .*, because of find-debuginfo.sh's buggy handling
# of matching the pattern against the symlinks file.
%{expand:%%global _find_debuginfo_opts %{?_find_debuginfo_opts} -p '.*%%{_bindir}/bootconfig(\.debug)?|.*%%{_bindir}/centrino-decode(\.debug)?|.*%%{_bindir}/powernow-k8-decode(\.debug)?|.*%%{_bindir}/cpupower(\.debug)?|.*%%{_libdir}/libcpupower.*|.*%%{_bindir}/turbostat(\.debug)?|.*%%{_bindir}/x86_energy_perf_policy(\.debug)?|.*%%{_bindir}/tmon(\.debug)?|.*%%{_bindir}/lsgpio(\.debug)?|.*%%{_bindir}/gpio-hammer(\.debug)?|.*%%{_bindir}/gpio-event-mon(\.debug)?|.*%%{_bindir}/gpio-watch(\.debug)?|.*%%{_bindir}/iio_event_monitor(\.debug)?|.*%%{_bindir}/iio_generic_buffer(\.debug)?|.*%%{_bindir}/lsiio(\.debug)?|.*%%{_bindir}/intel-speed-select(\.debug)?|.*%%{_bindir}/page_owner_sort(\.debug)?|.*%%{_bindir}/slabinfo(\.debug)?|.*%%{_sbindir}/intel_sdsi(\.debug)?|XXX' -o kernel-tools-debuginfo.list}

%package -n rtla
Summary: Real-Time Linux Analysis tools
Requires: libtraceevent
Requires: libtracefs
%ifarch %{cpupowerarchs}
Requires: kernel-tools-libs = %{version}-%{release}
%endif
%description -n rtla
The rtla meta-tool includes a set of commands that aims to analyze
the real-time properties of Linux. Instead of testing Linux as a black box,
rtla leverages kernel tracing capabilities to provide precise information
about the properties and root causes of unexpected results.

%package -n rv
Summary: RV: Runtime Verification
%description -n rv
Runtime Verification (RV) is a lightweight (yet rigorous) method that
complements classical exhaustive verification techniques (such as model
checking and theorem proving) with a more practical approach for
complex systems.
The rv tool is the interface for a collection of monitors that aim
analysing the logical and timing behavior of Linux.

# with_tools
%endif

%if %{with_selftests}

%package selftests-internal
Summary: Kernel samples and selftests
Requires: binutils, bpftool, iproute-tc, nmap-ncat, python3, fuse-libs, keyutils
%description selftests-internal
Kernel sample programs and selftests.

# Note that this pattern only works right to match the .build-id
# symlinks because of the trailing nonmatching alternation and
# the leading .*, because of find-debuginfo.sh's buggy handling
# of matching the pattern against the symlinks file.
%{expand:%%global _find_debuginfo_opts %{?_find_debuginfo_opts} -p '.*%%{_libexecdir}/(ksamples|kselftests)/.*|XXX' -o selftests-debuginfo.list}

%define __requires_exclude ^liburandom_read.so.*$

# with_selftests
%endif

%define kernel_gcov_package() \
%package %{?1:%{1}-}gcov\
Summary: gcov graph and source files for coverage data collection.\
%description %{?1:%{1}-}gcov\
%{?1:%{1}-}gcov includes the gcov graph and source files for gcov coverage collection.\
%{nil}

%package -n kernel-abi-stablelists
Summary: The Red Hat Enterprise Linux kernel ABI symbol stablelists
AutoReqProv: no
%description -n kernel-abi-stablelists
The kABI package contains information pertaining to the Red Hat Enterprise
Linux kernel ABI, including lists of kernel symbols that are needed by
external Linux kernel modules, and a yum plugin to aid enforcement.

%if %{with_kabidw_base}
%package kernel-kabidw-base-internal
Summary: The baseline dataset for kABI verification using DWARF data
Group: System Environment/Kernel
AutoReqProv: no
%description kernel-kabidw-base-internal
The package contains data describing the current ABI of the Red Hat Enterprise
Linux kernel, suitable for the kabi-dw tool.
%endif

#
# This macro creates a kernel-<subpackage>-debuginfo package.
#	%%kernel_debuginfo_package <subpackage>
#
# Explanation of the find_debuginfo_opts: We build multiple kernels (debug
# pae etc.) so the regex filters those kernels appropriately. We also
# have to package several binaries as part of kernel-devel but getting
# unique build-ids is tricky for these userspace binaries. We don't really
# care about debugging those so we just filter those out and remove it.
%define kernel_debuginfo_package() \
%package %{?1:%{1}-}debuginfo\
Summary: Debug information for package %{name}%{?1:-%{1}}\
Requires: %{name}-debuginfo-common-%{_target_cpu} = %{version}-%{release}\
Provides: %{name}%{?1:-%{1}}-debuginfo-%{_target_cpu} = %{version}-%{release}\
Provides: installonlypkg(kernel)\
AutoReqProv: no\
%description %{?1:%{1}-}debuginfo\
This package provides debug information for package %{name}%{?1:-%{1}}.\
This is required to use SystemTap with %{name}%{?1:-%{1}}-%{KVERREL}.\
%{expand:%%global _find_debuginfo_opts %{?_find_debuginfo_opts} --keep-section '.BTF' -p '.*\/usr\/src\/kernels/.*|XXX' -o ignored-debuginfo.list -p '/.*/%%{KVERREL_RE}%{?1:[+]%{1}}/.*|/.*%%{KVERREL_RE}%{?1:\+%{1}}(\.debug)?' -o debuginfo%{?1}.list}\
%{nil}

#
# This macro creates a kernel-<subpackage>-devel package.
#	%%kernel_devel_package [-m] <subpackage> <pretty-name>
#
%define kernel_devel_package(m) \
%package %{?1:%{1}-}devel\
Summary: Development package for building kernel modules to match the %{?2:%{2} }kernel\
Provides: kernel%{?1:-%{1}}-devel-%{_target_cpu} = %{version}-%{release}\
Provides: kernel-devel-%{_target_cpu} = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: kernel-devel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Provides: installonlypkg(kernel)\
AutoReqProv: no\
Requires(pre): findutils\
Requires: findutils\
Requires: perl-interpreter\
Requires: openssl-devel\
Requires: elfutils-libelf-devel\
Requires: bison\
Requires: flex\
Requires: make\
Requires: gcc\
%if %{-m:1}%{!-m:0}\
Requires: kernel-devel-uname-r = %{KVERREL}%{uname_variant %{?1:%{1}}}\
%endif\
%description %{?1:%{1}-}devel\
This package provides kernel headers and makefiles sufficient to build modules\
against the %{?2:%{2} }kernel package.\
%{nil}

#
# This macro creates an empty kernel-<subpackage>-devel-matched package that
# requires both the core and devel packages locked on the same version.
#	%%kernel_devel_matched_package [-m] <subpackage> <pretty-name>
#
%define kernel_devel_matched_package(m) \
%package %{?1:%{1}-}devel-matched\
Summary: Meta package to install matching core and devel packages for a given %{?2:%{2} }kernel\
Requires: kernel%{?1:-%{1}}-devel = %{version}-%{release}\
Requires: kernel%{?1:-%{1}}-core = %{version}-%{release}\
%description %{?1:%{1}-}devel-matched\
This meta package is used to install matching core and devel packages for a given %{?2:%{2} }kernel.\
%{nil}

#
# kernel-<variant>-ipaclones-internal package
#
%define kernel_ipaclones_package() \
%package %{?1:%{1}-}ipaclones-internal\
Summary: *.ipa-clones files generated by -fdump-ipa-clones for kernel%{?1:-%{1}}\
Group: System Environment/Kernel\
AutoReqProv: no\
%description %{?1:%{1}-}ipaclones-internal\
This package provides *.ipa-clones files.\
%{nil}

#
# This macro creates a kernel-<subpackage>-modules-internal package.
#	%%kernel_modules_internal_package <subpackage> <pretty-name>
#
%define kernel_modules_internal_package() \
%package %{?1:%{1}-}modules-internal\
Summary: Extra kernel modules to match the %{?2:%{2} }kernel\
Group: System Environment/Kernel\
Provides: kernel%{?1:-%{1}}-modules-internal-%{_target_cpu} = %{version}-%{release}\
Provides: kernel%{?1:-%{1}}-modules-internal-%{_target_cpu} = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: kernel%{?1:-%{1}}-modules-internal = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: installonlypkg(kernel-module)\
Provides: kernel%{?1:-%{1}}-modules-internal-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
AutoReq: no\
AutoProv: yes\
%description %{?1:%{1}-}modules-internal\
This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat internal usage.\
%{nil}

%if %{with_realtime} || %{with_realtime_arm64_64k}
#
# this macro creates a kernel-<subpackage>-kvm package
# %%kernel_kvm_package <subpackage>
#
%define kernel_kvm_package() \
%package %{?1:%{1}-}kvm\
Summary: KVM modules for package kernel%{?1:-%{1}}\
Group: System Environment/Kernel\
Requires: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Provides: installonlypkg(kernel-module)\
Provides: kernel%{?1:-%{1}}-kvm-%{_target_cpu} = %{version}-%{release}\
AutoReq: no\
%description -n kernel%{?1:-%{1}}-kvm\
This package provides KVM modules for package kernel%{?1:-%{1}}.\
%{nil}
%endif

#
# This macro creates a kernel-<subpackage>-modules-extra package.
#	%%kernel_modules_extra_package [-m] <subpackage> <pretty-name>
#
%define kernel_modules_extra_package(m) \
%package %{?1:%{1}-}modules-extra\
Summary: Extra kernel modules to match the %{?2:%{2} }kernel\
Provides: kernel%{?1:-%{1}}-modules-extra-%{_target_cpu} = %{version}-%{release}\
Provides: kernel%{?1:-%{1}}-modules-extra-%{_target_cpu} = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: kernel%{?1:-%{1}}-modules-extra = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: installonlypkg(kernel-module)\
Provides: kernel%{?1:-%{1}}-modules-extra-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
%if %{-m:1}%{!-m:0}\
Requires: kernel-modules-extra-uname-r = %{KVERREL}%{uname_variant %{?1:%{1}}}\
%endif\
AutoReq: no\
AutoProv: yes\
%description %{?1:%{1}-}modules-extra\
This package provides less commonly used kernel modules for the %{?2:%{2} }kernel package.\
%{nil}

#
# This macro creates a kernel-<subpackage>-modules package.
#	%%kernel_modules_package [-m] <subpackage> <pretty-name>
#
%define kernel_modules_package(m) \
%package %{?1:%{1}-}modules\
Summary: kernel modules to match the %{?2:%{2}-}core kernel\
Provides: kernel%{?1:-%{1}}-modules-%{_target_cpu} = %{version}-%{release}\
Provides: kernel-modules-%{_target_cpu} = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: kernel-modules = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: installonlypkg(kernel-module)\
Provides: kernel%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
%if %{-m:1}%{!-m:0}\
Requires: kernel-modules-uname-r = %{KVERREL}%{uname_variant %{?1:%{1}}}\
%endif\
AutoReq: no\
AutoProv: yes\
%description %{?1:%{1}-}modules\
This package provides commonly used kernel modules for the %{?2:%{2}-}core kernel package.\
%{nil}

#
# This macro creates a kernel-<subpackage>-modules-core package.
#	%%kernel_modules_core_package [-m] <subpackage> <pretty-name>
#
%define kernel_modules_core_package(m) \
%package %{?1:%{1}-}modules-core\
Summary: Core kernel modules to match the %{?2:%{2}-}core kernel\
Provides: kernel%{?1:-%{1}}-modules-core-%{_target_cpu} = %{version}-%{release}\
Provides: kernel-modules-core-%{_target_cpu} = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: kernel-modules-core = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: installonlypkg(kernel-module)\
Provides: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
%if %{-m:1}%{!-m:0}\
Requires: kernel-modules-core-uname-r = %{KVERREL}%{uname_variant %{?1:%{1}}}\
%endif\
AutoReq: no\
AutoProv: yes\
%description %{?1:%{1}-}modules-core\
This package provides essential kernel modules for the %{?2:%{2}-}core kernel package.\
%{nil}

#
# this macro creates a kernel-<subpackage> meta package.
#	%%kernel_meta_package <subpackage>
#
%define kernel_meta_package() \
%package %{1}\
summary: kernel meta-package for the %{1} kernel\
Requires: kernel-%{1}-core-uname-r = %{KVERREL}%{uname_suffix %{1}}\
Requires: kernel-%{1}-modules-uname-r = %{KVERREL}%{uname_suffix %{1}}\
Requires: kernel-%{1}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{1}}\
%if "%{1}" == "rt" || "%{1}" == "rt-debug" || "%{1}" == "rt-64k" || "%{1}" == "rt-64k-debug"\
Requires: realtime-setup\
%endif\
Provides: installonlypkg(kernel)\
%description %{1}\
The meta-package for the %{1} kernel\
%{nil}

#
# This macro creates a kernel-<subpackage> and its -devel and -debuginfo too.
#	%%define variant_summary The Linux kernel compiled for <configuration>
#	%%kernel_variant_package [-n <pretty-name>] [-m] [-o] <subpackage>
#
%define kernel_variant_package(n:mo) \
%package %{?1:%{1}-}core\
Summary: %{variant_summary}\
Provides: kernel-%{?1:%{1}-}core-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Provides: installonlypkg(kernel)\
%if %{-m:1}%{!-m:0}\
Requires: kernel-core-uname-r = %{KVERREL}%{uname_variant %{?1:%{1}}}\
Requires: kernel-%{?1:%{1}-}-modules-core-uname-r = %{KVERREL}%{uname_variant %{?1:%{1}}}\
%endif\
%{expand:%%kernel_reqprovconf %{?1:%{1}} %{-o:%{-o}}}\
%if %{?1:1} %{!?1:0} \
%{expand:%%kernel_meta_package %{?1:%{1}}}\
%endif\
%{expand:%%kernel_devel_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\
%{expand:%%kernel_devel_matched_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\
%{expand:%%kernel_modules_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\
%{expand:%%kernel_modules_core_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\
%{expand:%%kernel_modules_extra_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\
%if %{-m:0}%{!-m:1}\
%{expand:%%kernel_modules_internal_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\
%if 0%{!?fedora:1}\
%{expand:%%kernel_modules_partner_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\
%endif\
%{expand:%%kernel_debuginfo_package %{?1:%{1}}}\
%endif\
%if %{efiuki}\
%if "%{1}" != "rt" && "%{1}" != "rt-debug" && "%{1}" != "rt-64k" && "%{1}" != "rt-64k-debug"\
%package %{?1:%{1}-}uki-virt\
Summary: %{variant_summary} unified kernel image for virtual machines\
Provides: installonlypkg(kernel)\
Provides: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires(pre): %{kernel_prereq}\
Requires(pre): systemd >= 252-20\
%package %{?1:%{1}-}uki-virt-addons\
Summary: %{variant_summary} unified kernel image addons for virtual machines\
Provides: installonlypkg(kernel)\
Requires: kernel%{?1:-%{1}}-uki-virt = %{version}-%{release}\
Requires(pre): systemd >= 252-20\
%endif\
%endif\
%if "%{1}" == "rt" || "%{1}" == "rt-debug" || "%{1}" == "rt-64k" || "%{1}" == "rt-64k-debug"\
%{expand:%%kernel_kvm_package %{?1:%{1}}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\
%endif \
%if %{with_gcov}\
%{expand:%%kernel_gcov_package %{?1:%{1}}}\
%endif\
%{nil}

#
# This macro creates a kernel-<subpackage>-modules-partner package.
#	%%kernel_modules_partner_package <subpackage> <pretty-name>
#
%define kernel_modules_partner_package() \
%package %{?1:%{1}-}modules-partner\
Summary: Extra kernel modules to match the %{?2:%{2} }kernel\
Group: System Environment/Kernel\
Provides: kernel%{?1:-%{1}}-modules-partner-%{_target_cpu} = %{version}-%{release}\
Provides: kernel%{?1:-%{1}}-modules-partner-%{_target_cpu} = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: kernel%{?1:-%{1}}-modules-partner = %{version}-%{release}%{uname_suffix %{?1:%{1}}}\
Provides: installonlypkg(kernel-module)\
Provides: kernel%{?1:-%{1}}-modules-partner-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
Requires: kernel%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
AutoReq: no\
AutoProv: yes\
%description %{?1:%{1}-}modules-partner\
This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat partners usage.\
%{nil}

# Now, each variant package.

%if %{with_pae}
%define variant_summary The Linux kernel compiled for Cortex-A15
%kernel_variant_package lpae
%description lpae-core
This package includes a version of the Linux kernel with support for
Cortex-A15 devices with LPAE and HW virtualisation support
%endif

%if %{with_zfcpdump}
%define variant_summary The Linux kernel compiled for zfcpdump usage
%kernel_variant_package -o zfcpdump
%description zfcpdump-core
The kernel package contains the Linux kernel (vmlinuz) for use by the
zfcpdump infrastructure.
# with_zfcpdump
%endif

%if %{with_arm64_64k}
%define variant_summary The Linux kernel compiled for 64k pagesize usage
%kernel_variant_package 64k
%description 64k-core
The kernel package contains a variant of the ARM64 Linux kernel using
a 64K page size.
%endif

%if %{with_arm64_64k} && %{with_debug}
%define variant_summary The Linux kernel compiled with extra debugging enabled
%if !%{debugbuildsenabled}
%kernel_variant_package -m 64k-debug
%else
%kernel_variant_package 64k-debug
%endif
%description 64k-debug-core
The debug kernel package contains a variant of the ARM64 Linux kernel using
a 64K page size.
This variant of the kernel has numerous debugging options enabled.
It should only be installed when trying to gather additional information
on kernel bugs, as some of these options impact performance noticably.
%endif

%if %{with_realtime}
%define variant_summary The Linux kernel compiled with PREEMPT_RT enabled
%kernel_variant_package rt
%description rt-core
This package includes a version of the Linux kernel compiled with PREEMPT_RT
(real-time preemption support).
%endif

%if %{with_debug} && %{with_realtime}
%define variant_summary The Linux kernel compiled with PREEMPT_RT enabled
%kernel_variant_package rt-debug
%description rt-debug-core
This package includes a version of the Linux kernel compiled with PREEMPT_RT
(real-time preemption support) and has numerous debugging options enabled.
It should only be installed when trying to gather additional information
on kernel bugs, as some of these options impact performance noticably.
%endif

%if %{with_realtime_arm64_64k}
%define variant_summary The Linux kernel compiled with PREEMPT_RT enabled and for 64k pagesize usage
%kernel_variant_package rt-64k
%description rt-64k-core
The kernel package contains a variant of the ARM64 Linux kernel with PREEMPT_RT
enabled and using a 64K page size.
%endif

%if %{with_realtime_arm64_64k} && %{with_debug}
%define variant_summary The Linux PREEMPT_RT kernel compiled with extra debugging enabled
%if !%{debugbuildsenabled}
%kernel_variant_package -m rt-64k-debug
%else
%kernel_variant_package rt-64k-debug
%endif
%description rt-64k-debug-core
The debug kernel package contains a variant of the ARM64 Linux PREEMPT_RT
kernel using a 64K page size.
This variant of the kernel has numerous debugging options enabled.
It should only be installed when trying to gather additional information
on kernel bugs, as some of these options impact performance noticably.
%endif

%if !%{debugbuildsenabled}
%kernel_variant_package -m debug
%else
%kernel_variant_package debug
%endif
%description debug-core
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system:  memory allocation, process allocation, device
input and output, etc.

This variant of the kernel has numerous debugging options enabled.
It should only be installed when trying to gather additional information
on kernel bugs, as some of these options impact performance noticably.

# And finally the main -core package

%define variant_summary The Linux kernel
%kernel_variant_package
%description core
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

%if %{efiuki}
%description debug-uki-virt
Prebuilt debug unified kernel image for virtual machines.

%description debug-uki-virt-addons
Prebuilt debug unified kernel image addons for virtual machines.

%description uki-virt
Prebuilt default unified kernel image for virtual machines.

%description uki-virt-addons
Prebuilt default unified kernel image addons for virtual machines.
%endif

%if %{with_ipaclones}
%kernel_ipaclones_package
%endif

%prep
# do a few sanity-checks for --with *only builds
%if %{with_baseonly}
%if !%{with_up}
echo "Cannot build --with baseonly, up build is disabled"
exit 1
%endif
%endif

# more sanity checking; do it quietly
if [ "%{patches}" != "%%{patches}" ] ; then
  for patch in %{patches} ; do
    if [ ! -f $patch ] ; then
      echo "ERROR: Patch  ${patch##/*/}  listed in specfile but is missing"
      exit 1
    fi
  done
fi 2>/dev/null

patch_command='git apply'
ApplyPatch()
{
  local patch=$1
  shift
  if [ ! -f $RPM_SOURCE_DIR/$patch ]; then
    exit 1
  fi
  if ! grep -E "^Patch[0-9]+: $patch\$" %{_specdir}/${RPM_PACKAGE_NAME}.spec ; then
    if [ "${patch:0:8}" != "patch-%{kversion}." ] ; then
      echo "ERROR: Patch  $patch  not listed as a source patch in specfile"
      exit 1
    fi
  fi 2>/dev/null
  case "$patch" in
  *.bz2) bunzip2 < "$RPM_SOURCE_DIR/$patch" | $patch_command ${1+"$@"} ;;
  *.gz)  gunzip  < "$RPM_SOURCE_DIR/$patch" | $patch_command ${1+"$@"} ;;
  *.xz)  unxz    < "$RPM_SOURCE_DIR/$patch" | $patch_command ${1+"$@"} ;;
  *) $patch_command ${1+"$@"} < "$RPM_SOURCE_DIR/$patch" ;;
  esac
}

# don't apply patch if it's empty
ApplyOptionalPatch()
{
  local patch=$1
  shift
  if [ ! -f $RPM_SOURCE_DIR/$patch ]; then
    exit 1
  fi
  local C=$(wc -l $RPM_SOURCE_DIR/$patch | awk '{print $1}')
  if [ "$C" -gt 9 ]; then
    ApplyPatch $patch ${1+"$@"}
  fi
}

%setup -q -n kernel-%{tarfile_release} -c
mv linux-%{tarfile_release} linux-%{KVERREL}

cd linux-%{KVERREL}
cp -a %{SOURCE1} .

%if !%{nopatches}

ApplyOptionalPatch patch-%{patchversion}-redhat.patch
%endif

ApplyOptionalPatch linux-kernel-test.patch

# END OF PATCH APPLICATIONS

# Any further pre-build tree manipulations happen here.

chmod +x scripts/checkpatch.pl
mv COPYING COPYING-%{version}-%{release}

# This Prevents scripts/setlocalversion from mucking with our version numbers.
touch .scmversion

# Mangle /usr/bin/python shebangs to /usr/bin/python3
# Mangle all Python shebangs to be Python 3 explicitly
# -p preserves timestamps
# -n prevents creating ~backup files
# -i specifies the interpreter for the shebang
# This fixes errors such as
# *** ERROR: ambiguous python shebang in /usr/bin/kvm_stat: #!/usr/bin/python. Change it to python3 (or python2) explicitly.
# We patch all sources below for which we got a report/error.
pathfix.py -i "%{__python3}" -p -n \
	tools/kvm/kvm_stat/kvm_stat \
	scripts/show_delta \
	scripts/diffconfig \
	scripts/bloat-o-meter \
	scripts/jobserver-exec \
	tools \
	Documentation \
	scripts/clang-tools

# only deal with configs if we are going to build for the arch
%ifnarch %nobuildarches

if [ -L configs ]; then
	rm -f configs
fi
mkdir configs
cd configs

# Drop some necessary files from the source dir into the buildroot
cp $RPM_SOURCE_DIR/kernel-*.config .
cp %{SOURCE80} .
# merge.pl
cp %{SOURCE3000} .
# kernel-local
cp %{SOURCE3001} .
FLAVOR=%{primary_target} SPECVERSION=%{version} ./generate_all_configs.sh %{debugbuildsenabled}

# Merge in any user-provided local config option changes
%ifnarch %nobuildarches
for i in %{all_arch_configs}
do
  mv $i $i.tmp
  ./merge.pl %{SOURCE3001} $i.tmp > $i
%if %{with_gcov}
  echo "Merging with gcov options"
  cat %{SOURCE75}
  mv $i $i.tmp
  ./merge.pl %{SOURCE75} $i.tmp > $i
%endif
  rm $i.tmp
done
%endif

%if %{with clang_lto}
for i in *aarch64*.config *x86_64*.config; do
  sed -i 's/# CONFIG_LTO_CLANG_THIN is not set/CONFIG_LTO_CLANG_THIN=y/' $i
  sed -i 's/CONFIG_LTO_NONE=y/# CONFIG_LTO_NONE is not set/' $i
done
%endif

# Add DUP and kpatch certificates to system trusted keys for RHEL
%if 0%{?rhel}
%if %{signkernel}%{signmodules}
openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem
openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem
openssl x509 -inform der -in %{SOURCE102} -out rhelimaca1.pem
openssl x509 -inform der -in %{SOURCE105} -out nvidiagpuoot001.pem
cat rheldup3.pem rhelkpatch1.pem rhelimaca1.pem nvidiagpuoot001.pem > ../certs/rhel.pem
%if %{signkernel}
%ifarch s390x ppc64le
openssl x509 -inform der -in %{secureboot_ca_0} -out secureboot.pem
cat secureboot.pem >> ../certs/rhel.pem
%endif
%endif
for i in *.config; do
  sed -i 's@CONFIG_SYSTEM_TRUSTED_KEYS=""@CONFIG_SYSTEM_TRUSTED_KEYS="certs/rhel.pem"@' $i
done
%endif
%endif

# Adjust FIPS module name for RHEL
%if 0%{?rhel}
for i in *.config; do
  sed -i 's/CONFIG_CRYPTO_FIPS_NAME=.*/CONFIG_CRYPTO_FIPS_NAME="Red Hat Enterprise Linux %{rhel} - Kernel Cryptographic API"/' $i
done
%endif

cp %{SOURCE81} .
OPTS=""
%if %{with_configchecks}
	OPTS="$OPTS -w -n -c"
%endif
%if %{with clang_lto}
for opt in %{clang_make_opts}; do
  OPTS="$OPTS -m $opt"
done
%endif
RHJOBS=$RPM_BUILD_NCPUS PACKAGE_NAME=kernel ./process_configs.sh $OPTS ${specversion}

cp %{SOURCE82} .
RPM_SOURCE_DIR=$RPM_SOURCE_DIR ./update_scripts.sh %{primary_target}

# We may want to override files from the primary target in case of building
# against a flavour of it (eg. centos not rhel), thus override it here if
# necessary
if [ "%{primary_target}" == "rhel" ]; then
%if 0%{?centos}
  echo "Updating scripts/sources to centos version"
  RPM_SOURCE_DIR=$RPM_SOURCE_DIR ./update_scripts.sh centos
%else
  echo "Not updating scripts/sources to centos version"
%endif
fi

# end of kernel config
%endif

cd ..
# # End of Configs stuff

# get rid of unwanted files resulting from patch fuzz
find . \( -name "*.orig" -o -name "*~" \) -delete >/dev/null

# remove unnecessary SCM files
find . -name .gitignore -delete >/dev/null

cd ..

###
### build
###
%build

rm -rf %{buildroot_unstripped} || true
mkdir -p %{buildroot_unstripped}

%if %{with_sparse}
%define sparse_mflags	C=1
%endif

cp_vmlinux()
{
  eu-strip --remove-comment -o "$2" "$1"
}

# Note we need to disable these flags for cross builds because the flags
# from redhat-rpm-config assume that host == target so target arch
# flags cause issues with the host compiler.
%if !%{with_cross}
%define build_hostcflags  %{?build_cflags}
%define build_hostldflags %{?build_ldflags}
%endif

%define make %{__make} %{?cross_opts} %{?make_opts} HOSTCFLAGS="%{?build_hostcflags}" HOSTLDFLAGS="%{?build_hostldflags}"

InitBuildVars() {
    # Initialize the kernel .config file and create some variables that are
    # needed for the actual build process.

    Variant=$1

    # Pick the right kernel config file
    Config=kernel-%{version}-%{_target_cpu}${Variant:+-${Variant}}.config
    DevelDir=/usr/src/kernels/%{KVERREL}${Variant:++${Variant}}

    KernelVer=%{version}-%{release}.%{_target_cpu}${Variant:++${Variant}}

    # make sure EXTRAVERSION says what we want it to say
    # Trim the release if this is a CI build, since KERNELVERSION is limited to 64 characters
    ShortRel=$(perl -e "print \"%{release}\" =~ s/\.pr\.[0-9A-Fa-f]{32}//r")
    perl -p -i -e "s/^EXTRAVERSION.*/EXTRAVERSION = -${ShortRel}.%{_target_cpu}${Variant:++${Variant}}/" Makefile

    # if pre-rc1 devel kernel, must fix up PATCHLEVEL for our versioning scheme
    # if we are post rc1 this should match anyway so this won't matter
    perl -p -i -e 's/^PATCHLEVEL.*/PATCHLEVEL = %{patchlevel}/' Makefile

    %{make} %{?_smp_mflags} mrproper
    cp configs/$Config .config

    %if %{signkernel}%{signmodules}
    cp configs/x509.genkey certs/.
    %endif

    Arch=`head -1 .config | cut -b 3-`
    echo USING ARCH=$Arch

    KCFLAGS="%{?kcflags}"

    # add kpatch flags for base kernel
    if [ "$Variant" == "" ]; then
        KCFLAGS="$KCFLAGS %{?kpatch_kcflags}"
    fi
}

BuildKernel() {
    MakeTarget=$1
    KernelImage=$2
    DoVDSO=$3
    Variant=$4
    InstallName=${5:-vmlinuz}

    DoModules=1
    if [ "$Variant" = "zfcpdump" ]; then
	    DoModules=0
    fi

    # When the bootable image is just the ELF kernel, strip it.
    # We already copy the unstripped file into the debuginfo package.
    if [ "$KernelImage" = vmlinux ]; then
      CopyKernel=cp_vmlinux
    else
      CopyKernel=cp
    fi

%if %{with_gcov}
    # Make build directory unique for each variant, so that gcno symlinks
    # are also unique for each variant.
    if [ -n "$Variant" ]; then
        ln -s $(pwd) ../linux-%{KVERREL}-${Variant}
    fi
    echo "GCOV - continuing build in: $(pwd)"
    pushd ../linux-%{KVERREL}${Variant:+-${Variant}}
    pwd > ../kernel${Variant:+-${Variant}}-gcov.list
%endif

    InitBuildVars $Variant

    echo BUILDING A KERNEL FOR ${Variant} %{_target_cpu}...

    %{make} ARCH=$Arch olddefconfig >/dev/null

    # This ensures build-ids are unique to allow parallel debuginfo
    perl -p -i -e "s/^CONFIG_BUILD_SALT.*/CONFIG_BUILD_SALT=\"%{KVERREL}\"/" .config
    %{make} ARCH=$Arch KCFLAGS="$KCFLAGS" WITH_GCOV="%{?with_gcov}" %{?_smp_mflags} $MakeTarget %{?sparse_mflags} %{?kernel_mflags}
    if [ $DoModules -eq 1 ]; then
	%{make} ARCH=$Arch KCFLAGS="$KCFLAGS" WITH_GCOV="%{?with_gcov}" %{?_smp_mflags} modules %{?sparse_mflags} || exit 1
    fi

    mkdir -p $RPM_BUILD_ROOT/%{image_install_path}
    mkdir -p $RPM_BUILD_ROOT/lib/modules/$KernelVer
    mkdir -p $RPM_BUILD_ROOT/lib/modules/$KernelVer/systemtap
%if %{with_debuginfo}
    mkdir -p $RPM_BUILD_ROOT%{debuginfodir}/%{image_install_path}
%endif

%ifarch %{arm} aarch64
    %{make} ARCH=$Arch dtbs INSTALL_DTBS_PATH=$RPM_BUILD_ROOT/%{image_install_path}/dtb-$KernelVer
    %{make} ARCH=$Arch dtbs_install INSTALL_DTBS_PATH=$RPM_BUILD_ROOT/%{image_install_path}/dtb-$KernelVer
    cp -r $RPM_BUILD_ROOT/%{image_install_path}/dtb-$KernelVer $RPM_BUILD_ROOT/lib/modules/$KernelVer/dtb
    find arch/$Arch/boot/dts -name '*.dtb' -type f -delete
%endif

    # Start installing the results
    install -m 644 .config $RPM_BUILD_ROOT/boot/config-$KernelVer
    install -m 644 .config $RPM_BUILD_ROOT/lib/modules/$KernelVer/config
    install -m 644 System.map $RPM_BUILD_ROOT/boot/System.map-$KernelVer
    install -m 644 System.map $RPM_BUILD_ROOT/lib/modules/$KernelVer/System.map

    # We estimate the size of the initramfs because rpm needs to take this size
    # into consideration when performing disk space calculations. (See bz #530778)
    dd if=/dev/zero of=$RPM_BUILD_ROOT/boot/initramfs-$KernelVer.img bs=1M count=20

    if [ -f arch/$Arch/boot/zImage.stub ]; then
      cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/%{image_install_path}/zImage.stub-$KernelVer || :
      cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/lib/modules/$KernelVer/zImage.stub-$KernelVer || :
    fi

    %if %{signkernel}
    if [ "$KernelImage" = vmlinux ]; then
        # We can't strip and sign $KernelImage in place, because
        # we need to preserve original vmlinux for debuginfo.
        # Use a copy for signing.
        $CopyKernel $KernelImage $KernelImage.tosign
        KernelImage=$KernelImage.tosign
        CopyKernel=cp
    fi

    # Sign the image if we're using EFI
    # aarch64 kernels are gziped EFI images
    KernelExtension=${KernelImage##*.}
    if [ "$KernelExtension" == "gz" ]; then
        SignImage=${KernelImage%.*}
    else
        SignImage=$KernelImage
    fi

    %ifarch x86_64 aarch64
    %pesign -s -i $SignImage -o vmlinuz.signed -a %{secureboot_ca_0} -c %{secureboot_key_0} -n %{pesign_name_0}
    %endif
    %ifarch s390x ppc64le
    if [ -x /usr/bin/rpm-sign ]; then
	rpm-sign --key "%{pesign_name_0}" --lkmsign $SignImage --output vmlinuz.signed
    elif [ "$DoModules" == "1" -a "%{signmodules}" == "1" ]; then
	chmod +x scripts/sign-file
	./scripts/sign-file -p sha256 certs/signing_key.pem certs/signing_key.x509 $SignImage vmlinuz.signed
    else
	mv $SignImage vmlinuz.signed
    fi
    %endif

    if [ ! -s vmlinuz.signed ]; then
        echo "pesigning failed"
        exit 1
    fi
    mv vmlinuz.signed $SignImage
    if [ "$KernelExtension" == "gz" ]; then
        gzip -f9 $SignImage
    fi
    # signkernel
    %endif

    $CopyKernel $KernelImage \
                $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer
    chmod 755 $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer
    cp $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer $RPM_BUILD_ROOT/lib/modules/$KernelVer/$InstallName

    # hmac sign the kernel for FIPS
    echo "Creating hmac file: $RPM_BUILD_ROOT/%{image_install_path}/.vmlinuz-$KernelVer.hmac"
    ls -l $RPM_BUILD_ROOT/%{image_install_path}/$InstallName-$KernelVer
    (cd $RPM_BUILD_ROOT/%{image_install_path} && sha512hmac $InstallName-$KernelVer) > $RPM_BUILD_ROOT/%{image_install_path}/.vmlinuz-$KernelVer.hmac;
    cp $RPM_BUILD_ROOT/%{image_install_path}/.vmlinuz-$KernelVer.hmac $RPM_BUILD_ROOT/lib/modules/$KernelVer/.vmlinuz.hmac

    if [ $DoModules -eq 1 ]; then
	# Override $(mod-fw) because we don't want it to install any firmware
	# we'll get it from the linux-firmware package and we don't want conflicts
	%{make} %{?_smp_mflags} ARCH=$Arch INSTALL_MOD_PATH=$RPM_BUILD_ROOT %{?_smp_mflags} modules_install KERNELRELEASE=$KernelVer mod-fw=
    fi

%if %{with_gcov}
    # install gcov-needed files to $BUILDROOT/$BUILD/...:
    #   gcov_info->filename is absolute path
    #   gcno references to sources can use absolute paths (e.g. in out-of-tree builds)
    #   sysfs symlink targets (set up at compile time) use absolute paths to BUILD dir
    find . \( -name '*.gcno' -o -name '*.[chS]' \) -exec install -D '{}' "$RPM_BUILD_ROOT/$(pwd)/{}" \;
%endif

    # add an a noop %%defattr statement 'cause rpm doesn't like empty file list files
    echo '%%defattr(-,-,-)' > ../kernel${Variant:+-${Variant}}-ldsoconf.list
    if [ $DoVDSO -ne 0 ]; then
        %{make} ARCH=$Arch INSTALL_MOD_PATH=$RPM_BUILD_ROOT vdso_install KERNELRELEASE=$KernelVer
        if [ -s ldconfig-kernel.conf ]; then
             install -D -m 444 ldconfig-kernel.conf \
                $RPM_BUILD_ROOT/etc/ld.so.conf.d/kernel-$KernelVer.conf
	     echo /etc/ld.so.conf.d/kernel-$KernelVer.conf >> ../kernel${Variant:+-${Variant}}-ldsoconf.list
        fi

        rm -rf $RPM_BUILD_ROOT/lib/modules/$KernelVer/vdso/.build-id
    fi

    # And save the headers/makefiles etc for building modules against
    #
    # This all looks scary, but the end result is supposed to be:
    # * all arch relevant include/ files
    # * all Makefile/Kconfig files
    # * all script/ files

    rm -f $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    rm -f $RPM_BUILD_ROOT/lib/modules/$KernelVer/source
    mkdir -p $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    (cd $RPM_BUILD_ROOT/lib/modules/$KernelVer ; ln -s build source)
    # dirs for additional modules per module-init-tools, kbuild/modules.txt
    mkdir -p $RPM_BUILD_ROOT/lib/modules/$KernelVer/updates
    mkdir -p $RPM_BUILD_ROOT/lib/modules/$KernelVer/weak-updates
    # CONFIG_KERNEL_HEADER_TEST generates some extra files in the process of
    # testing so just delete
    find . -name *.h.s -delete
    # first copy everything
    cp --parents `find  -type f -name "Makefile*" -o -name "Kconfig*"` $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    if [ ! -e Module.symvers ]; then
        touch Module.symvers
    fi
    cp Module.symvers $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp System.map $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    if [ -s Module.markers ]; then
      cp Module.markers $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    fi

    # create the kABI metadata for use in packaging
    # NOTENOTE: the name symvers is used by the rpm backend
    # NOTENOTE: to discover and run the /usr/lib/rpm/fileattrs/kabi.attr
    # NOTENOTE: script which dynamically adds exported kernel symbol
    # NOTENOTE: checksums to the rpm metadata provides list.
    # NOTENOTE: if you change the symvers name, update the backend too
    echo "**** GENERATING kernel ABI metadata ****"
    gzip -c9 < Module.symvers > $RPM_BUILD_ROOT/boot/symvers-$KernelVer.gz
    cp $RPM_BUILD_ROOT/boot/symvers-$KernelVer.gz $RPM_BUILD_ROOT/lib/modules/$KernelVer/symvers.gz

%if %{with_kabichk}
    echo "**** kABI checking is enabled in kernel SPEC file. ****"
    chmod 0755 $RPM_SOURCE_DIR/check-kabi
    if [ -e $RPM_SOURCE_DIR/Module.kabi_%{_target_cpu}$Variant ]; then
        cp $RPM_SOURCE_DIR/Module.kabi_%{_target_cpu}$Variant $RPM_BUILD_ROOT/Module.kabi
        $RPM_SOURCE_DIR/check-kabi -k $RPM_BUILD_ROOT/Module.kabi -s Module.symvers || exit 1
        # for now, don't keep it around.
        rm $RPM_BUILD_ROOT/Module.kabi
    else
        echo "**** NOTE: Cannot find reference Module.kabi file. ****"
    fi
%endif

%if %{with_kabidupchk}
    echo "**** kABI DUP checking is enabled in kernel SPEC file. ****"
    if [ -e $RPM_SOURCE_DIR/Module.kabi_dup_%{_target_cpu}$Variant ]; then
        cp $RPM_SOURCE_DIR/Module.kabi_dup_%{_target_cpu}$Variant $RPM_BUILD_ROOT/Module.kabi
        $RPM_SOURCE_DIR/check-kabi -k $RPM_BUILD_ROOT/Module.kabi -s Module.symvers || exit 1
        # for now, don't keep it around.
        rm $RPM_BUILD_ROOT/Module.kabi
    else
        echo "**** NOTE: Cannot find DUP reference Module.kabi file. ****"
    fi
%endif

%if %{with_kabidw_base}
    # Don't build kabi base for debug kernels
    if [ "$Variant" != "zfcpdump" -a "$Variant" != "debug" ]; then
        mkdir -p $RPM_BUILD_ROOT/kabi-dwarf
        tar xjvf %{SOURCE301} -C $RPM_BUILD_ROOT/kabi-dwarf

        mkdir -p $RPM_BUILD_ROOT/kabi-dwarf/stablelists
        tar xjvf %{SOURCE300} -C $RPM_BUILD_ROOT/kabi-dwarf/stablelists

        echo "**** GENERATING DWARF-based kABI baseline dataset ****"
        chmod 0755 $RPM_BUILD_ROOT/kabi-dwarf/run_kabi-dw.sh
        $RPM_BUILD_ROOT/kabi-dwarf/run_kabi-dw.sh generate \
            "$RPM_BUILD_ROOT/kabi-dwarf/stablelists/kabi-current/kabi_stablelist_%{_target_cpu}" \
            "$(pwd)" \
            "$RPM_BUILD_ROOT/kabidw-base/%{_target_cpu}${Variant:+.${Variant}}" || :

        rm -rf $RPM_BUILD_ROOT/kabi-dwarf
    fi
%endif

%if %{with_kabidwchk}
    if [ "$Variant" != "zfcpdump" ]; then
        mkdir -p $RPM_BUILD_ROOT/kabi-dwarf
        tar xjvf %{SOURCE301} -C $RPM_BUILD_ROOT/kabi-dwarf
        if [ -d "$RPM_BUILD_ROOT/kabi-dwarf/base/%{_target_cpu}${Variant:+.${Variant}}" ]; then
            mkdir -p $RPM_BUILD_ROOT/kabi-dwarf/stablelists
            tar xjvf %{SOURCE300} -C $RPM_BUILD_ROOT/kabi-dwarf/stablelists

            echo "**** GENERATING DWARF-based kABI dataset ****"
            chmod 0755 $RPM_BUILD_ROOT/kabi-dwarf/run_kabi-dw.sh
            $RPM_BUILD_ROOT/kabi-dwarf/run_kabi-dw.sh generate \
                "$RPM_BUILD_ROOT/kabi-dwarf/stablelists/kabi-current/kabi_stablelist_%{_target_cpu}" \
                "$(pwd)" \
                "$RPM_BUILD_ROOT/kabi-dwarf/base/%{_target_cpu}${Variant:+.${Variant}}.tmp" || :

            echo "**** kABI DWARF-based comparison report ****"
            $RPM_BUILD_ROOT/kabi-dwarf/run_kabi-dw.sh compare \
                "$RPM_BUILD_ROOT/kabi-dwarf/base/%{_target_cpu}${Variant:+.${Variant}}" \
                "$RPM_BUILD_ROOT/kabi-dwarf/base/%{_target_cpu}${Variant:+.${Variant}}.tmp" || :
            echo "**** End of kABI DWARF-based comparison report ****"
        else
            echo "**** Baseline dataset for kABI DWARF-BASED comparison report not found ****"
        fi

        rm -rf $RPM_BUILD_ROOT/kabi-dwarf
    fi
%endif

    # then drop all but the needed Makefiles/Kconfig files
    rm -rf $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/scripts
    rm -rf $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/include
    cp .config $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a scripts $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    rm -rf $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/scripts/tracing
    rm -f $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/scripts/spdxcheck.py

%ifarch s390x
    # CONFIG_EXPOLINE_EXTERN=y produces arch/s390/lib/expoline/expoline.o
    # which is needed during external module build.
    if [ -f arch/s390/lib/expoline/expoline.o ]; then
      cp -a --parents arch/s390/lib/expoline/expoline.o $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    fi
%endif

    # Files for 'make scripts' to succeed with kernel-devel.
    mkdir -p $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/security/selinux/include
    cp -a --parents security/selinux/include/classmap.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents security/selinux/include/initial_sid_to_string.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    mkdir -p $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/tools/include/tools
    cp -a --parents tools/include/tools/be_byteshift.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/include/tools/le_byteshift.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build

    # Files for 'make prepare' to succeed with kernel-devel.
    cp -a --parents tools/include/linux/compiler* $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/include/linux/types.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/build/Build.include $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents tools/build/fixdep.c $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents tools/objtool/sync-check.sh $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/bpf/resolve_btfids $RPM_BUILD_ROOT/lib/modules/$KernelVer/build

    cp --parents security/selinux/include/policycap_names.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents security/selinux/include/policycap.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build

    cp -a --parents tools/include/asm $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/include/asm-generic $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/include/linux $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/include/uapi/asm $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/include/uapi/asm-generic $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/include/uapi/linux $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/include/vdso $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents tools/scripts/utilities.mak $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/lib/subcmd $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents tools/lib/*.c $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents tools/objtool/*.[ch] $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents tools/objtool/Build $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents tools/objtool/include/objtool/*.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/lib/bpf $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp --parents tools/lib/bpf/Build $RPM_BUILD_ROOT/lib/modules/$KernelVer/build

    if [ -f tools/objtool/objtool ]; then
      cp -a tools/objtool/objtool $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/tools/objtool/ || :
    fi
    if [ -f tools/objtool/fixdep ]; then
      cp -a tools/objtool/fixdep $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/tools/objtool/ || :
    fi
    if [ -d arch/$Arch/scripts ]; then
      cp -a arch/$Arch/scripts $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/arch/%{_arch} || :
    fi
    if [ -f arch/$Arch/*lds ]; then
      cp -a arch/$Arch/*lds $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/arch/%{_arch}/ || :
    fi
    if [ -f arch/%{asmarch}/kernel/module.lds ]; then
      cp -a --parents arch/%{asmarch}/kernel/module.lds $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    fi
    find $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/scripts \( -iname "*.o" -o -iname "*.cmd" \) -exec rm -f {} +
%ifarch ppc64le
    cp -a --parents arch/powerpc/lib/crtsavres.[So] $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
%endif
    if [ -d arch/%{asmarch}/include ]; then
      cp -a --parents arch/%{asmarch}/include $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    fi
    if [ -d tools/arch/%{asmarch}/include ]; then
      cp -a --parents tools/arch/%{asmarch}/include $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    fi
%ifarch aarch64
    # arch/arm64/include/asm/xen references arch/arm
    cp -a --parents arch/arm/include/asm/xen $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    # arch/arm64/include/asm/opcodes.h references arch/arm
    cp -a --parents arch/arm/include/asm/opcodes.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
%endif
    # include the machine specific headers for ARM variants, if available.
%ifarch %{arm}
    if [ -d arch/%{asmarch}/mach-${Variant}/include ]; then
      cp -a --parents arch/%{asmarch}/mach-${Variant}/include $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    fi
    # include a few files for 'make prepare'
    cp -a --parents arch/arm/tools/gen-mach-types $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/arm/tools/mach-types $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/

%endif
    cp -a include $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/include
    # Cross-reference from include/perf/events/sof.h
    cp -a sound/soc/sof/sof-audio.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/sound/soc/sof
%ifarch i686 x86_64
    # files for 'make prepare' to succeed with kernel-devel
    cp -a --parents arch/x86/entry/syscalls/syscall_32.tbl $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/entry/syscalls/syscall_64.tbl $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/tools/relocs_32.c $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/tools/relocs_64.c $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/tools/relocs.c $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/tools/relocs_common.c $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/tools/relocs.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/purgatory/purgatory.c $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/purgatory/stack.S $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/purgatory/setup-x86_64.S $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/purgatory/entry64.S $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/boot/string.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/boot/string.c $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents arch/x86/boot/ctype.h $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/

    cp -a --parents scripts/syscalltbl.sh $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/
    cp -a --parents scripts/syscallhdr.sh $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/

    cp -a --parents tools/arch/x86/include/asm $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/arch/x86/include/uapi/asm $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/objtool/arch/x86/lib $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/arch/x86/lib/ $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/arch/x86/tools/gen-insn-attr-x86.awk $RPM_BUILD_ROOT/lib/modules/$KernelVer/build
    cp -a --parents tools/objtool/arch/x86/ $RPM_BUILD_ROOT/lib/modules/$KernelVer/build

%endif
    # Clean up intermediate tools files
    find $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/tools \( -iname "*.o" -o -iname "*.cmd" \) -exec rm -f {} +

    # Make sure the Makefile, version.h, and auto.conf have a matching
    # timestamp so that external modules can be built
    touch -r $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/Makefile \
        $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/include/generated/uapi/linux/version.h \
        $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/include/config/auto.conf

%if %{with_debuginfo}
    eu-readelf -n vmlinux | grep "Build ID" | awk '{print $NF}' > vmlinux.id
    cp vmlinux.id $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/vmlinux.id

    #
    # save the vmlinux file for kernel debugging into the kernel-debuginfo rpm
    #
    mkdir -p $RPM_BUILD_ROOT%{debuginfodir}/lib/modules/$KernelVer
    cp vmlinux $RPM_BUILD_ROOT%{debuginfodir}/lib/modules/$KernelVer
    if [ -n "%{vmlinux_decompressor}" ]; then
	    eu-readelf -n  %{vmlinux_decompressor} | grep "Build ID" | awk '{print $NF}' > vmlinux.decompressor.id
	    # Without build-id the build will fail. But for s390 the build-id
	    # wasn't added before 5.11. In case it is missing prefer not
	    # packaging the debuginfo over a build failure.
	    if [ -s vmlinux.decompressor.id ]; then
		    cp vmlinux.decompressor.id $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/vmlinux.decompressor.id
		    cp %{vmlinux_decompressor} $RPM_BUILD_ROOT%{debuginfodir}/lib/modules/$KernelVer/vmlinux.decompressor
	    fi
    fi
%endif

    find $RPM_BUILD_ROOT/lib/modules/$KernelVer -name "*.ko" -type f >modnames

    # mark modules executable so that strip-to-file can strip them
    xargs --no-run-if-empty chmod u+x < modnames

    # Generate a list of modules for block and networking.

    grep -F /drivers/ modnames | xargs --no-run-if-empty nm -upA |
    sed -n 's,^.*/\([^/]*\.ko\):  *U \(.*\)$,\1 \2,p' > drivers.undef

    collect_modules_list()
    {
      sed -r -n -e "s/^([^ ]+) \\.?($2)\$/\\1/p" drivers.undef |
        LC_ALL=C sort -u > $RPM_BUILD_ROOT/lib/modules/$KernelVer/modules.$1
      if [ ! -z "$3" ]; then
        sed -r -e "/^($3)\$/d" -i $RPM_BUILD_ROOT/lib/modules/$KernelVer/modules.$1
      fi
    }

    collect_modules_list networking \
      'register_netdev|ieee80211_register_hw|usbnet_probe|phy_driver_register|rt(l_|2x00)(pci|usb)_probe|register_netdevice'
    collect_modules_list block \
      'ata_scsi_ioctl|scsi_add_host|scsi_add_host_with_dma|blk_alloc_queue|blk_init_queue|register_mtd_blktrans|scsi_esp_register|scsi_register_device_handler|blk_queue_physical_block_size' 'pktcdvd.ko|dm-mod.ko'
    collect_modules_list drm \
      'drm_open|drm_init'
    collect_modules_list modesetting \
      'drm_crtc_init'

    # detect missing or incorrect license tags
    ( find $RPM_BUILD_ROOT/lib/modules/$KernelVer -name '*.ko' | xargs /sbin/modinfo -l | \
        grep -E -v 'GPL( v2)?$|Dual BSD/GPL$|Dual MPL/GPL$|GPL and additional rights$' ) && exit 1

    remove_depmod_files()
    {
        # remove files that will be auto generated by depmod at rpm -i time
        pushd $RPM_BUILD_ROOT/lib/modules/$KernelVer/
            # in case below list needs to be extended, remember to add a
            # matching ghost entry in the files section as well
            rm -f modules.{alias,alias.bin,builtin.alias.bin,builtin.bin} \
                  modules.{dep,dep.bin,devname,softdep,symbols,symbols.bin}
        popd
    }

    remove_depmod_files

    # Identify modules in the kernel-modules-extras package
    %{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer $(realpath configs/mod-extra.list)
    # Identify modules in the kernel-modules-extras package
    %{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer %{SOURCE84} internal
%if 0%{!?fedora:1}
    # Identify modules in the kernel-modules-partner package
    %{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer %{SOURCE85} partner
%endif
    if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ] || [ "$Variant" = "rt-64k" ] || [ "$Variant" = "rt-64k-debug" ]; then
        # Identify modules in the kernel-rt-kvm package
        %{SOURCE20} $RPM_BUILD_ROOT lib/modules/$KernelVer %{SOURCE86} kvm
    fi

    #
    # Generate the kernel-core and kernel-modules files lists
    #

    # Copy the System.map file for depmod to use, and create a backup of the
    # full module tree so we can restore it after we're done filtering
    cp System.map $RPM_BUILD_ROOT/.
    cp configs/filter-*.sh $RPM_BUILD_ROOT/.
    pushd $RPM_BUILD_ROOT
    mkdir restore
    cp -r lib/modules/$KernelVer/* restore/.

    # don't include anything going into kernel-modules-extra in the file lists
    xargs rm -rf < mod-extra.list
    # don't include anything going int kernel-modules-internal in the file lists
    xargs rm -rf < mod-internal.list
%if 0%{!?fedora:1}
    # don't include anything going int kernel-modules-partner in the file lists
    xargs rm -rf < mod-partner.list
%endif
    if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ] || [ "$Variant" = "rt-64k" ] || [ "$Variant" = "rt-64k-debug" ]; then
        # don't include anything going into kernel-rt-kvm in the file lists
        xargs rm -rf < mod-kvm.list
    fi

    if [ $DoModules -eq 1 ]; then
	# Find all the module files and filter them out into the core and
	# modules lists.  This actually removes anything going into -modules
	# from the dir.
	find lib/modules/$KernelVer/kernel -name *.ko | sort -n > modules.list
	./filter-modules.sh modules.list %{_target_cpu}
	rm filter-*.sh

	# Run depmod on the resulting module tree and make sure it isn't broken
	depmod -b . -aeF ./System.map $KernelVer &> depmod.out
	if [ -s depmod.out ]; then
	    echo "Depmod failure"
	    cat depmod.out
	    exit 1
	else
	    rm depmod.out
	fi
    else
	# Ensure important files/directories exist to let the packaging succeed
	echo '%%defattr(-,-,-)' > modules.list
	echo '%%defattr(-,-,-)' > k-d.list
	mkdir -p lib/modules/$KernelVer/kernel
	# Add files usually created by make modules, needed to prevent errors
	# thrown by depmod during package installation
	touch lib/modules/$KernelVer/modules.order
	touch lib/modules/$KernelVer/modules.builtin
    fi

%if %{efiuki}
    if [ "$Variant" != "rt" ] && [ "$Variant" != "rt-debug" ] && [ "$Variant" != "rt-64k" ] && [ "$Variant" != "rt-64k-debug" ]; then
        popd

        # RHEL/CentOS specific .SBAT entries
%if 0%{?centos}
        SBATsuffix="centos"
%else
        SBATsuffix="rhel"
%endif
        SBAT=$(cat <<- EOF
	linux,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
	linux.$SBATsuffix,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
	kernel-uki-virt.$SBATsuffix,1,Red Hat,kernel-uki-virt,$KernelVer,mailto:secalert@redhat.com
	EOF
	)

        KernelUnifiedImageDir="$RPM_BUILD_ROOT/lib/modules/$KernelVer"
        KernelUnifiedImage="$KernelUnifiedImageDir/$InstallName-virt.efi"
    
        mkdir -p $KernelUnifiedImageDir
    
        dracut --conf=%{SOURCE150} \
               --confdir=$(mktemp -d) \
               --verbose \
               --kver "$KernelVer" \
               --kmoddir "$RPM_BUILD_ROOT/lib/modules/$KernelVer/" \
               --logfile=$(mktemp) \
               --uefi \
               --sbat "$SBAT" \
               --kernel-image $(realpath $KernelImage) \
               --kernel-cmdline 'console=tty0 console=ttyS0' \
    	   $KernelUnifiedImage

        KernelAddonsDirOut="$KernelUnifiedImage.extra.d"
        mkdir -p $KernelAddonsDirOut
        python3 %{SOURCE151} %{SOURCE152} $KernelAddonsDirOut virt %{primary_target} %{_target_cpu}

%if %{signkernel}

%if 0%{?centos}
	UKI_secureboot_name=centossecureboot204
%else
	UKI_secureboot_name=redhatsecureboot504
%endif
	UKI_secureboot_cert=%{_datadir}/pki/sb-certs/secureboot-uki-virt-%{_arch}.cer

        %pesign -s -i $KernelUnifiedImage -o $KernelUnifiedImage.signed -a %{secureboot_ca_0} -c $UKI_secureboot_cert -n $UKI_secureboot_name
        if [ ! -s $KernelUnifiedImage.signed ]; then
          echo "pesigning failed"
          exit 1
        fi
        mv $KernelUnifiedImage.signed $KernelUnifiedImage

      for addon in "$KernelAddonsDirOut"/*; do
        %pesign -s -i $addon -o $addon.signed -a %{secureboot_ca_0} -c %{secureboot_key_0} -n %{pesign_name_0}
        rm -f $addon
        mv $addon.signed $addon
      done

# signkernel
%endif

      # hmac sign the UKI for FIPS
      KernelUnifiedImageHMAC="$KernelUnifiedImageDir/.$InstallName-virt.efi.hmac"
      echo "hmac sign the UKI for FIPS"
      echo "Creating hmac file: $KernelUnifiedImageHMAC"
      (cd $KernelUnifiedImageDir && sha512hmac $InstallName-virt.efi) > $KernelUnifiedImageHMAC;

        pushd $RPM_BUILD_ROOT

    # Variant != rt && Variant != rt-debug && Variant != rt-64k && Variant != rt-64k-debug
    fi
# efiuki
%endif

    remove_depmod_files

    # Go back and find all of the various directories in the tree.  We use this
    # for the dir lists in kernel-core
    find lib/modules/$KernelVer/kernel -mindepth 1 -type d | sort -n > module-dirs.list

    # Cleanup
    rm System.map
    # Just "cp -r" can be very slow: here, it rewrites _existing files_
    # with open(O_TRUNC). Many filesystems synchronously wait for metadata
    # update for such file rewrites (seen in strace as final close syscall
    # taking a long time). On a rotational disk, cp was observed to take
    # more than 5 minutes on ext4 and more than 15 minutes (!) on xfs.
    # With --remove-destination, we avoid this, and copying
    # (with enough RAM to cache it) takes 5 seconds:
    cp -r --remove-destination restore/* lib/modules/$KernelVer/.
    rm -rf restore
    popd

    # Make sure the files lists start with absolute paths or rpmbuild fails.
    # Also add in the dir entries
    sed -e 's/^lib*/\/lib/' %{?zipsed} $RPM_BUILD_ROOT/k-d.list > ../kernel${Variant:+-${Variant}}-modules.list
    sed -e 's/^lib*/%dir \/lib/' %{?zipsed} $RPM_BUILD_ROOT/module-dirs.list > ../kernel${Variant:+-${Variant}}-modules-core.list
    sed -e 's/^lib*/\/lib/' %{?zipsed} $RPM_BUILD_ROOT/modules.list >> ../kernel${Variant:+-${Variant}}-modules-core.list
    sed -e 's/^lib*/\/lib/' %{?zipsed} $RPM_BUILD_ROOT/mod-extra.list >> ../kernel${Variant:+-${Variant}}-modules-extra.list

    # Cleanup
    rm -f $RPM_BUILD_ROOT/k-d.list
    rm -f $RPM_BUILD_ROOT/modules.list
    rm -f $RPM_BUILD_ROOT/module-dirs.list
    rm -f $RPM_BUILD_ROOT/mod-extra.list
    rm -f $RPM_BUILD_ROOT/mod-internal.list
%if 0%{!?fedora:1}
    rm -f $RPM_BUILD_ROOT/mod-partner.list
%endif
    if [ "$Variant" = "rt" ] || [ "$Variant" = "rt-debug" ] || [ "$Variant" = "rt-64k" ] || [ "$Variant" = "rt-64k-debug" ]; then
        rm -f $RPM_BUILD_ROOT/mod-kvm.list
    fi

%if %{with_cross}
    make -C $RPM_BUILD_ROOT/lib/modules/$KernelVer/build M=scripts clean
    make -C $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/tools/bpf/resolve_btfids clean
    sed -i 's/REBUILD_SCRIPTS_FOR_CROSS:=0/REBUILD_SCRIPTS_FOR_CROSS:=1/' $RPM_BUILD_ROOT/lib/modules/$KernelVer/build/Makefile
%endif

    # Move the devel headers out of the root file system
    mkdir -p $RPM_BUILD_ROOT/usr/src/kernels
    mv $RPM_BUILD_ROOT/lib/modules/$KernelVer/build $RPM_BUILD_ROOT/$DevelDir

    # This is going to create a broken link during the build, but we don't use
    # it after this point.  We need the link to actually point to something
    # when kernel-devel is installed, and a relative link doesn't work across
    # the F17 UsrMove feature.
    ln -sf $DevelDir $RPM_BUILD_ROOT/lib/modules/$KernelVer/build

%ifnarch armv7hl
    # Generate vmlinux.h and put it to kernel-devel path
    # zfcpdump build does not have btf anymore
    if [ "$Variant" != "zfcpdump" ]; then
        # Build the bootstrap bpftool to generate vmlinux.h
        make -C tools/bpf/bpftool bootstrap
        tools/bpf/bpftool/bootstrap/bpftool btf dump file vmlinux format c > $RPM_BUILD_ROOT/$DevelDir/vmlinux.h
    fi
%endif

    # prune junk from kernel-devel
    find $RPM_BUILD_ROOT/usr/src/kernels -name ".*.cmd" -delete

    # Red Hat UEFI Secure Boot CA cert, which can be used to authenticate the kernel
    mkdir -p $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer
%if %{signkernel}
    install -m 0644 %{secureboot_ca_0} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca.cer
    %ifarch s390x ppc64le
    if [ -x /usr/bin/rpm-sign ]; then
        install -m 0644 %{secureboot_key_0} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename}
    fi
    %endif
%endif

%if 0%{?rhel}
    # Red Hat IMA code-signing cert, which is used to authenticate package files
    install -m 0644 %{ima_signing_cert} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{ima_cert_name}
%endif

%if %{signmodules}
    if [ $DoModules -eq 1 ]; then
        # Save the signing keys so we can sign the modules in __modsign_install_post
        cp certs/signing_key.pem certs/signing_key.pem.sign${Variant:++${Variant}}
        cp certs/signing_key.x509 certs/signing_key.x509.sign${Variant:++${Variant}}
        %ifarch s390x ppc64le
        if [ ! -x /usr/bin/rpm-sign ]; then
            install -m 0644 certs/signing_key.x509.sign${Variant:++${Variant}} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/kernel-signing-ca.cer
            openssl x509 -in certs/signing_key.pem.sign${Variant:++${Variant}} -outform der -out $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename}
            chmod 0644 $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{signing_key_filename}
        fi
        %endif
    fi
%endif

%if %{with_ipaclones}
    MAXPROCS=$(echo %{?_smp_mflags} | sed -n 's/-j\s*\([0-9]\+\)/\1/p')
    if [ -z "$MAXPROCS" ]; then
        MAXPROCS=1
    fi
    if [ "$Variant" == "" ]; then
        mkdir -p $RPM_BUILD_ROOT/$DevelDir-ipaclones
        find . -name '*.ipa-clones' | xargs -i{} -r -n 1 -P $MAXPROCS install -m 644 -D "{}" "$RPM_BUILD_ROOT/$DevelDir-ipaclones/{}"
    fi
%endif

%if %{with_gcov}
    popd
%endif
}

###
# DO it...
###

# prepare directories
rm -rf $RPM_BUILD_ROOT
mkdir -p $RPM_BUILD_ROOT/boot
mkdir -p $RPM_BUILD_ROOT%{_libexecdir}

cd linux-%{KVERREL}


%if %{with_debug}
BuildKernel %make_target %kernel_image %{_use_vdso} debug
%if %{with_arm64_64k}
BuildKernel %make_target %kernel_image %{_use_vdso} 64k-debug
%endif
%if %{with_realtime}
BuildKernel %make_target %kernel_image %{_use_vdso} rt-debug
%endif
%if %{with_realtime_arm64_64k}
BuildKernel %make_target %kernel_image %{_use_vdso} rt-64k-debug
%endif
%endif

%if %{with_zfcpdump}
BuildKernel %make_target %kernel_image %{_use_vdso} zfcpdump
%endif

%if %{with_arm64_64k}
BuildKernel %make_target %kernel_image %{_use_vdso} 64k
%endif

%if %{with_pae}
BuildKernel %make_target %kernel_image %{use_vdso} lpae
%endif

%if %{with_realtime}
BuildKernel %make_target %kernel_image %{use_vdso} rt
%endif

%if %{with_realtime_arm64_64k}
BuildKernel %make_target %kernel_image %{_use_vdso} rt-64k
%endif

%if %{with_up}
BuildKernel %make_target %kernel_image %{_use_vdso}
%endif

%ifnarch noarch i686
%if !%{with_debug} && !%{with_zfcpdump} && !%{with_pae} && !%{with_up} && !%{with_arm64_64k} && !%{with_realtime} && !%{with_realtime_arm64_64k}
# If only building the user space tools, then initialize the build environment
# and some variables so that the various userspace tools can be built.
InitBuildVars
%endif
%endif

%ifarch aarch64
%global perf_build_extra_opts CORESIGHT=1
%endif
%global perf_make \
  %{__make} %{?make_opts} EXTRA_CFLAGS="${RPM_OPT_FLAGS}" EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags} -Wl,-E" %{?cross_opts} -C tools/perf V=1 NO_PERF_READ_VDSO32=1 NO_PERF_READ_VDSOX32=1 WERROR=0 NO_LIBUNWIND=1 NO_GTK2=1 NO_STRLCPY=1 NO_BIONIC=1 LIBBPF_DYNAMIC=1 LIBTRACEEVENT_DYNAMIC=1 %{?perf_build_extra_opts} prefix=%{_prefix} PYTHON=%{__python3}
%if %{with_perf}
# perf
# make sure check-headers.sh is executable
chmod +x tools/perf/check-headers.sh
%{perf_make} DESTDIR=$RPM_BUILD_ROOT all
# libperf
make -C tools/lib/perf V=1
%endif

%global tools_make \
  CFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags}" EXTRA_CFLAGS="${RPM_OPT_FLAGS}" %{make} %{?make_opts}

%ifarch %{cpupowerarchs}
    # link against in-tree libcpupower for idle state support
    %global rtla_make %{tools_make} LDFLAGS="%{__global_ldflags} -L../../power/cpupower" INCLUDES="-I../../power/cpupower/lib"
%else
    %global rtla_make %{tools_make}
%endif

%if %{with_tools}
%ifarch %{cpupowerarchs}
# cpupower
# make sure version-gen.sh is executable.
chmod +x tools/power/cpupower/utils/version-gen.sh
%{tools_make} %{?_smp_mflags} -C tools/power/cpupower CPUFREQ_BENCH=false DEBUG=false
%ifarch x86_64
    pushd tools/power/cpupower/debug/x86_64
    %{tools_make} %{?_smp_mflags} centrino-decode powernow-k8-decode
    popd
%endif
%ifarch x86_64
   pushd tools/power/x86/x86_energy_perf_policy/
   %{tools_make}
   popd
   pushd tools/power/x86/turbostat
   %{tools_make}
   popd
   pushd tools/power/x86/intel-speed-select
   %{tools_make}
   popd
   pushd tools/arch/x86/intel_sdsi
   %{tools_make} CFLAGS="${RPM_OPT_FLAGS}"
   popd
%endif
%endif
pushd tools/thermal/tmon/
%{tools_make}
popd
pushd tools/bootconfig/
%{tools_make}
popd
pushd tools/iio/
%{tools_make}
popd
pushd tools/gpio/
%{tools_make}
popd
# build VM tools
pushd tools/mm/
%{tools_make} CFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags}" slabinfo page_owner_sort
popd
pushd tools/verification/rv/
%{tools_make}
popd
pushd tools/tracing/rtla
%{rtla_make}
popd
%endif

if [ -f $DevelDir/vmlinux.h ]; then
  RPM_VMLINUX_H=$DevelDir/vmlinux.h
fi
echo "${RPM_VMLINUX_H}" > ../vmlinux_h_path

%if %{with_selftests}
# Unfortunately, samples/bpf/Makefile expects that the headers are installed
# in the source tree. We installed them previously to $RPM_BUILD_ROOT/usr
# but there's no way to tell the Makefile to take them from there.
%{make} %{?_smp_mflags} headers_install

# If we re building only tools without kernel, we need to generate config
# headers and prepare tree for modules building. The modules_prepare target
# will cover both.
if [ ! -f include/generated/autoconf.h ]; then
   %{make} %{?_smp_mflags} modules_prepare
fi

%{make} %{?_smp_mflags} ARCH=$Arch V=1 M=samples/bpf/ VMLINUX_H="${RPM_VMLINUX_H}" || true

pushd tools/testing/selftests
# We need to install here because we need to call make with ARCH set which
# doesn't seem possible to do in the install section.
%{make} %{?_smp_mflags} ARCH=$Arch V=1 TARGETS="bpf cgroup mm livepatch net net/forwarding net/mptcp net/netfilter tc-testing memfd drivers/net/bonding iommu cachestat drivers/net" SKIP_TARGETS="" FORCE_TARGETS=1 INSTALL_PATH=%{buildroot}%{_libexecdir}/kselftests VMLINUX_H="${RPM_VMLINUX_H}" DEFAULT_INSTALL_HDR_PATH=0 install

# 'make install' for bpf is broken and upstream refuses to fix it.
# Install the needed files manually.
for dir in bpf bpf/no_alu32 bpf/cpuv4 bpf/progs; do
	# In ARK, the rpm build continues even if some of the selftests
	# cannot be built. It's not always possible to build selftests,
	# as upstream sometimes dependens on too new llvm version or has
	# other issues. If something did not get built, just skip it.
	test -d $dir || continue
	mkdir -p %{buildroot}%{_libexecdir}/kselftests/$dir
	find $dir -maxdepth 1 -type f \( -executable -o -name '*.py' -o -name settings -o \
		-name 'btf_dump_test_case_*.c' -o -name '*.ko' -o \
		-name '*.o' -exec sh -c 'readelf -h "{}" | grep -q "^  Machine:.*BPF"' \; \) -print0 | \
	xargs -0 cp -t %{buildroot}%{_libexecdir}/kselftests/$dir || true
done
ln -sr  %{buildroot}%{_libexecdir}/kselftests/bpf/bpftool %{buildroot}%{_libexecdir}/kselftests/bpf/no_alu32/bpftool

# CKI clang does not support cpuv4 so it skips this variant
ln -sr  %{buildroot}%{_libexecdir}/kselftests/bpf/bpftool %{buildroot}%{_libexecdir}/kselftests/bpf/cpuv4/bpftool || echo "selftests/bpf: no cpuv4 variant"

%buildroot_save_unstripped "usr/libexec/kselftests/bpf/test_progs"
%buildroot_save_unstripped "usr/libexec/kselftests/bpf/test_progs-no_alu32"
%buildroot_save_unstripped "usr/libexec/kselftests/bpf/test_progs-cpuv4"
popd
%endif

%if %{with_doc}
# Make the HTML pages.
%{__make} PYTHON=/usr/bin/python3 htmldocs || %{doc_build_fail}

# sometimes non-world-readable files sneak into the kernel source tree
chmod -R a=rX Documentation
find Documentation -type d | xargs chmod u+w
%endif

# In the modsign case, we do 3 things.  1) We check the "variant" and hard
# code the value in the following invocations.  This is somewhat sub-optimal
# but we're doing this inside of an RPM macro and it isn't as easy as it
# could be because of that.  2) We restore the .tmp_versions/ directory from
# the one we saved off in BuildKernel above.  This is to make sure we're
# signing the modules we actually built/installed in that variant.  3) We
# grab the arch and invoke mod-sign.sh command to actually sign the modules.
#
# We have to do all of those things _after_ find-debuginfo runs, otherwise
# that will strip the signature off of the modules.
#
# Don't sign modules for the zfcpdump variant as it is monolithic.

%define __modsign_install_post \
  if [ "%{signmodules}" -eq "1" ]; then \
    if [ "%{with_pae}" -ne "0" ]; then \
       %{modsign_cmd} certs/signing_key.pem.sign+lpae certs/signing_key.x509.sign+lpae $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+lpae/ \
    fi \
    if [ "%{with_realtime}" -ne "0" ]; then \
       %{modsign_cmd} certs/signing_key.pem.sign+rt certs/signing_key.x509.sign+rt $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+rt/ \
    fi \
    if [ "%{with_debug}" -ne "0" ]; then \
         %{modsign_cmd} certs/signing_key.pem.sign+debug certs/signing_key.x509.sign+debug $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+debug/ \
    fi \
    if [ "%{with_arm64_64k}" -ne "0" ]; then \
       %{modsign_cmd} certs/signing_key.pem.sign+64k certs/signing_key.x509.sign+64k $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+64k/ \
    fi \
    if [ "%{with_arm64_64k}" -ne "0" ] && [ "%{with_debug}" -ne "0" ]; then \
         %{modsign_cmd} certs/signing_key.pem.sign+64k-debug certs/signing_key.x509.sign+64k-debug $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+64k-debug/ \
    fi \
    if [ "%{with_realtime}" -ne "0" ] && [ "%{with_debug}" -ne "0" ]; then \
         %{modsign_cmd} certs/signing_key.pem.sign+rt-debug certs/signing_key.x509.sign+rt-debug $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+rt-debug/ \
    fi \
    if [ "%{with_realtime_arm64_64k}" -ne "0" ]; then \
       %{modsign_cmd} certs/signing_key.pem.sign+rt-64k certs/signing_key.x509.sign+rt-64k $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+rt-64k/ \
    fi \
    if [ "%{with_realtime_arm64_64k}" -ne "0" ] && [ "%{with_debug}" -ne "0" ]; then \
         %{modsign_cmd} certs/signing_key.pem.sign+rt-64k-debug certs/signing_key.x509.sign+rt-64k-debug $RPM_BUILD_ROOT/lib/modules/%{KVERREL}+rt-64k-debug/ \
    fi \
    if [ "%{with_up}" -ne "0" ]; then \
      %{modsign_cmd} certs/signing_key.pem.sign certs/signing_key.x509.sign $RPM_BUILD_ROOT/lib/modules/%{KVERREL}/ \
    fi \
  fi \
  if [ "%{zipmodules}" -eq "1" ]; then \
    echo "Compressing kernel modules ..." \
    find $RPM_BUILD_ROOT/lib/modules/ -type f -name '*.ko' | xargs -n 16 -P${RPM_BUILD_NCPUS} -r %compression %compression_flags; \
  fi \
%{nil}

###
### Special hacks for debuginfo subpackages.
###

# This macro is used by %%install, so we must redefine it before that.
%define debug_package %{nil}

%if %{with_debuginfo}

%ifnarch noarch
%global __debug_package 1
%files -f debugfiles.list debuginfo-common-%{_target_cpu}
%endif

%endif

# We don't want to package debuginfo for self-tests and samples but
# we have to delete them to avoid an error messages about unpackaged
# files.
# Delete the debuginfo for kernel-devel files
%define __remove_unwanted_dbginfo_install_post \
  if [ "%{with_selftests}" -ne "0" ]; then \
    rm -rf $RPM_BUILD_ROOT/usr/lib/debug/usr/libexec/ksamples; \
    rm -rf $RPM_BUILD_ROOT/usr/lib/debug/usr/libexec/kselftests; \
  fi \
  rm -rf $RPM_BUILD_ROOT/usr/lib/debug/usr/src; \
%{nil}

#
# Disgusting hack alert! We need to ensure we sign modules *after* all
# invocations of strip occur, which is in __debug_install_post if
# find-debuginfo.sh runs, and __os_install_post if not.
#
%define __spec_install_post \
  %{?__debug_package:%{__debug_install_post}}\
  %{__arch_install_post}\
  %{__os_install_post}\
  %{__remove_unwanted_dbginfo_install_post}\
  %{__restore_unstripped_root_post}\
  %{__modsign_install_post}

###
### install
###

%install

cd linux-%{KVERREL}

# re-define RPM_VMLINUX_H, because it doesn't carry over from %build
RPM_VMLINUX_H="$(cat ../vmlinux_h_path)"

%if %{with_doc}
docdir=$RPM_BUILD_ROOT%{_datadir}/doc/kernel-doc-%{specversion}-%{pkgrelease}

# copy the source over
mkdir -p $docdir
tar -h -f - --exclude=man --exclude='.*' -c Documentation | tar xf - -C $docdir
cat %{SOURCE2} | xz > $docdir/kernel.changelog.xz
chmod 0644 $docdir/kernel.changelog.xz

# with_doc
%endif

# We have to do the headers install before the tools install because the
# kernel headers_install will remove any header files in /usr/include that
# it doesn't install itself.

%if %{with_headers}
# Install kernel headers
%{__make} ARCH=%{hdrarch} INSTALL_HDR_PATH=$RPM_BUILD_ROOT/usr headers_install

find $RPM_BUILD_ROOT/usr/include \
     \( -name .install -o -name .check -o \
        -name ..install.cmd -o -name ..check.cmd \) -delete

%endif

%if %{with_cross_headers}
%if 0%{?fedora}
HDR_ARCH_LIST='arm arm64 powerpc s390 x86'
%else
HDR_ARCH_LIST='arm64 powerpc s390 x86'
%endif
mkdir -p $RPM_BUILD_ROOT/usr/tmp-headers

for arch in $HDR_ARCH_LIST; do
	mkdir $RPM_BUILD_ROOT/usr/tmp-headers/arch-${arch}
	%{__make} ARCH=${arch} INSTALL_HDR_PATH=$RPM_BUILD_ROOT/usr/tmp-headers/arch-${arch} headers_install
done

find $RPM_BUILD_ROOT/usr/tmp-headers \
     \( -name .install -o -name .check -o \
        -name ..install.cmd -o -name ..check.cmd \) -delete

# Copy all the architectures we care about to their respective asm directories
for arch in $HDR_ARCH_LIST ; do
	mkdir -p $RPM_BUILD_ROOT/usr/${arch}-linux-gnu/include
	mv $RPM_BUILD_ROOT/usr/tmp-headers/arch-${arch}/include/* $RPM_BUILD_ROOT/usr/${arch}-linux-gnu/include/
done

rm -rf $RPM_BUILD_ROOT/usr/tmp-headers
%endif

%if %{with_kernel_abi_stablelists}
# kabi directory
INSTALL_KABI_PATH=$RPM_BUILD_ROOT/lib/modules/
mkdir -p $INSTALL_KABI_PATH

# install kabi releases directories
tar xjvf %{SOURCE300} -C $INSTALL_KABI_PATH
# with_kernel_abi_stablelists
%endif

%if %{with_perf}
# perf tool binary and supporting scripts/binaries
%{perf_make} DESTDIR=$RPM_BUILD_ROOT lib=%{_lib} install-bin
# remove the 'trace' symlink.
rm -f %{buildroot}%{_bindir}/trace

# For both of the below, yes, this should be using a macro but right now
# it's hard coded and we don't actually want it anyway right now.
# Whoever wants examples can fix it up!

# remove examples
rm -rf %{buildroot}/usr/lib/perf/examples
rm -rf %{buildroot}/usr/lib/perf/include

# python-perf extension
%{perf_make} DESTDIR=$RPM_BUILD_ROOT install-python_ext

# perf man pages (note: implicit rpm magic compresses them later)
mkdir -p %{buildroot}/%{_mandir}/man1
%{perf_make} DESTDIR=$RPM_BUILD_ROOT install-man

# remove any tracevent files, eg. its plugins still gets built and installed,
# even if we build against system's libtracevent during perf build (by setting
# LIBTRACEEVENT_DYNAMIC=1 above in perf_make macro). Those files should already
# ship with libtraceevent package.
rm -rf %{buildroot}%{_libdir}/traceevent

# libperf
make -C tools/lib/perf DESTDIR=%{buildroot} prefix=%{_prefix} libdir=%{_libdir} V=1 install
rm -f %{buildroot}%{_libdir}/libperf.a
%endif

%if %{with_tools}
%ifarch %{cpupowerarchs}
%{make} -C tools/power/cpupower DESTDIR=$RPM_BUILD_ROOT libdir=%{_libdir} mandir=%{_mandir} CPUFREQ_BENCH=false install
rm -f %{buildroot}%{_libdir}/*.{a,la}
%find_lang cpupower
mv cpupower.lang ../
%ifarch x86_64
    pushd tools/power/cpupower/debug/x86_64
    install -m755 centrino-decode %{buildroot}%{_bindir}/centrino-decode
    install -m755 powernow-k8-decode %{buildroot}%{_bindir}/powernow-k8-decode
    popd
%endif
chmod 0755 %{buildroot}%{_libdir}/libcpupower.so*
mkdir -p %{buildroot}%{_unitdir} %{buildroot}%{_sysconfdir}/sysconfig
install -m644 %{SOURCE2000} %{buildroot}%{_unitdir}/cpupower.service
install -m644 %{SOURCE2001} %{buildroot}%{_sysconfdir}/sysconfig/cpupower
%endif
%ifarch x86_64
   mkdir -p %{buildroot}%{_mandir}/man8
   pushd tools/power/x86/x86_energy_perf_policy
   %{tools_make} DESTDIR=%{buildroot} install
   popd
   pushd tools/power/x86/turbostat
   %{tools_make} DESTDIR=%{buildroot} install
   popd
   pushd tools/power/x86/intel-speed-select
   %{tools_make} DESTDIR=%{buildroot} install
   popd
   pushd tools/arch/x86/intel_sdsi
   %{tools_make} CFLAGS="${RPM_OPT_FLAGS}" DESTDIR=%{buildroot} install
   popd
%endif
pushd tools/thermal/tmon
%{tools_make} INSTALL_ROOT=%{buildroot} install
popd
pushd tools/bootconfig
%{tools_make} DESTDIR=%{buildroot} install
popd
pushd tools/iio
%{tools_make} DESTDIR=%{buildroot} install
popd
pushd tools/gpio
%{tools_make} DESTDIR=%{buildroot} install
popd
install -m644 -D %{SOURCE2002} %{buildroot}%{_sysconfdir}/logrotate.d/kvm_stat
pushd tools/kvm/kvm_stat
%{__make} INSTALL_ROOT=%{buildroot} install-tools
%{__make} INSTALL_ROOT=%{buildroot} install-man
install -m644 -D kvm_stat.service %{buildroot}%{_unitdir}/kvm_stat.service
popd
# install VM tools
pushd tools/mm/
install -m755 slabinfo %{buildroot}%{_bindir}/slabinfo
install -m755 page_owner_sort %{buildroot}%{_bindir}/page_owner_sort
popd
pushd tools/verification/rv/
%{tools_make} DESTDIR=%{buildroot} install
popd
pushd tools/tracing/rtla/
%{tools_make} DESTDIR=%{buildroot} install
rm -f %{buildroot}%{_bindir}/hwnoise
rm -f %{buildroot}%{_bindir}/osnoise
rm -f %{buildroot}%{_bindir}/timerlat
(cd %{buildroot}

        ln -sf rtla ./%{_bindir}/hwnoise
        ln -sf rtla ./%{_bindir}/osnoise
        ln -sf rtla ./%{_bindir}/timerlat
)
popd
%endif

%if %{with_selftests}
pushd samples
install -d %{buildroot}%{_libexecdir}/ksamples
# install bpf samples
pushd bpf
install -d %{buildroot}%{_libexecdir}/ksamples/bpf
find -type f -executable -exec install -m755 {} %{buildroot}%{_libexecdir}/ksamples/bpf \;
install -m755 *.sh %{buildroot}%{_libexecdir}/ksamples/bpf
# test_lwt_bpf.sh compiles test_lwt_bpf.c when run; this works only from the
# kernel tree. Just remove it.
rm %{buildroot}%{_libexecdir}/ksamples/bpf/test_lwt_bpf.sh
install -m644 *_kern.o %{buildroot}%{_libexecdir}/ksamples/bpf || true
install -m644 tcp_bpf.readme %{buildroot}%{_libexecdir}/ksamples/bpf
popd
# install pktgen samples
pushd pktgen
install -d %{buildroot}%{_libexecdir}/ksamples/pktgen
find . -type f -executable -exec install -m755 {} %{buildroot}%{_libexecdir}/ksamples/pktgen/{} \;
find . -type f ! -executable -exec install -m644 {} %{buildroot}%{_libexecdir}/ksamples/pktgen/{} \;
popd
popd
# install mm selftests
pushd tools/testing/selftests/mm
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/mm/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/mm/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/mm/{} \;
popd
# install cgroup selftests
pushd tools/testing/selftests/cgroup
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/cgroup/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/cgroup/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/cgroup/{} \;
popd
# install drivers/net/mlxsw selftests
pushd tools/testing/selftests/drivers/net/mlxsw
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/drivers/net/mlxsw/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/drivers/net/mlxsw/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/drivers/net/mlxsw/{} \;
popd
# install drivers/net/netdevsim selftests
pushd tools/testing/selftests/drivers/net/netdevsim
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/drivers/net/netdevsim/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/drivers/net/netdevsim/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/drivers/net/netdevsim/{} \;
popd
# install drivers/net/bonding selftests
pushd tools/testing/selftests/drivers/net/bonding
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/drivers/net/bonding/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/drivers/net/bonding/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/drivers/net/bonding/{} \;
popd
# install net/forwarding selftests
pushd tools/testing/selftests/net/forwarding
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/net/forwarding/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/net/forwarding/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/net/forwarding/{} \;
popd
# install net/mptcp selftests
pushd tools/testing/selftests/net/mptcp
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/net/mptcp/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/net/mptcp/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/net/mptcp/{} \;
popd
# install tc-testing selftests
pushd tools/testing/selftests/tc-testing
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/tc-testing/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/tc-testing/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/tc-testing/{} \;
popd
# install livepatch selftests
pushd tools/testing/selftests/livepatch
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/livepatch/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/livepatch/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/livepatch/{} \;
popd
# install net/netfilter selftests
pushd tools/testing/selftests/net/netfilter
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/net/netfilter/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/net/netfilter/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/net/netfilter/{} \;
popd

# install memfd selftests
pushd tools/testing/selftests/memfd
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/memfd/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/memfd/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/memfd/{} \;
popd
# install iommu selftests
pushd tools/testing/selftests/iommu
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/iommu/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/iommu/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/iommu/{} \;
popd
# install cachestat selftests
pushd tools/testing/selftests/cachestat
find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/cachestat/{} \;
find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/cachestat/{} \;
find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/cachestat/{} \;
popd
%endif

###
### clean
###

###
### scripts
###

%if %{with_tools}
%post -n kernel-tools
%systemd_post cpupower.service

%preun -n kernel-tools
%systemd_preun cpupower.service

%postun -n kernel-tools
%systemd_postun cpupower.service

%post -n kernel-tools-libs
/sbin/ldconfig

%postun -n kernel-tools-libs
/sbin/ldconfig
%endif

#
# This macro defines a %%post script for a kernel*-devel package.
#	%%kernel_devel_post [<subpackage>]
# Note we don't run hardlink if ostree is in use, as ostree is
# a far more sophisticated hardlink implementation.
# https://github.com/projectatomic/rpm-ostree/commit/58a79056a889be8814aa51f507b2c7a4dccee526
#
# The deletion of *.hardlink-temporary files is a temporary workaround
# for this bug in the hardlink binary (fixed in util-linux 2.38):
# https://github.com/util-linux/util-linux/issues/1602
#
%define kernel_devel_post() \
%{expand:%%post %{?1:%{1}-}devel}\
if [ -f /etc/sysconfig/kernel ]\
then\
    . /etc/sysconfig/kernel || exit $?\
fi\
if [ "$HARDLINK" != "no" -a -x /usr/bin/hardlink -a ! -e /run/ostree-booted ] \
then\
    (cd /usr/src/kernels/%{KVERREL}%{?1:+%{1}} &&\
     /usr/bin/find . -type f | while read f; do\
       hardlink -c /usr/src/kernels/*%{?dist}.*/$f $f > /dev/null\
     done;\
     /usr/bin/find /usr/src/kernels -type f -name '*.hardlink-temporary' -delete\
    )\
fi\
%if %{with_cross}\
    echo "Building scripts and resolve_btfids"\
    env --unset=ARCH make -C /usr/src/kernels/%{KVERREL}%{?1:+%{1}} prepare_after_cross\
%endif\
%{nil}

#
# This macro defines a %%post script for a kernel*-modules-extra package.
# It also defines a %%postun script that does the same thing.
#	%%kernel_modules_extra_post [<subpackage>]
#
%define kernel_modules_extra_post() \
%{expand:%%post %{?1:%{1}-}modules-extra}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}\
%{expand:%%postun %{?1:%{1}-}modules-extra}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}

#
# This macro defines a %%post script for a kernel*-modules-internal package.
# It also defines a %%postun script that does the same thing.
#	%%kernel_modules_internal_post [<subpackage>]
#
%define kernel_modules_internal_post() \
%{expand:%%post %{?1:%{1}-}modules-internal}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}\
%{expand:%%postun %{?1:%{1}-}modules-internal}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}

%if %{with_realtime}
#
# This macro defines a %%post script for a kernel*-kvm package.
# It also defines a %%postun script that does the same thing.
#       %%kernel_kvm_post [<subpackage>]
#
%define kernel_kvm_post() \
%{expand:%%post %{?1:%{1}-}kvm}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}\
%{expand:%%postun %{?1:%{1}-}kvm}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}
%endif

#
# This macro defines a %%post script for a kernel*-modules-partner package.
# It also defines a %%postun script that does the same thing.
#	%%kernel_modules_partner_post [<subpackage>]
#
%define kernel_modules_partner_post() \
%{expand:%%post %{?1:%{1}-}modules-partner}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}\
%{expand:%%postun %{?1:%{1}-}modules-partner}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}

#
# This macro defines a %%post script for a kernel*-modules package.
# It also defines a %%postun script that does the same thing.
#	%%kernel_modules_post [<subpackage>]
#
%define kernel_modules_post() \
%{expand:%%post %{?1:%{1}-}modules}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
if [ ! -f %{_localstatedir}/lib/rpm-state/%{name}/installing_core_%{KVERREL}%{?1:+%{1}} ]; then\
	mkdir -p %{_localstatedir}/lib/rpm-state/%{name}\
	touch %{_localstatedir}/lib/rpm-state/%{name}/need_to_run_dracut_%{KVERREL}%{?1:+%{1}}\
fi\
%{nil}\
%{expand:%%postun %{?1:%{1}-}modules}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}\
%{expand:%%posttrans %{?1:%{1}-}modules}\
if [ -f %{_localstatedir}/lib/rpm-state/%{name}/need_to_run_dracut_%{KVERREL}%{?1:+%{1}} ]; then\
	rm -f %{_localstatedir}/lib/rpm-state/%{name}/need_to_run_dracut_%{KVERREL}%{?1:+%{1}}\
	echo "Running: dracut -f --kver %{KVERREL}%{?1:+%{1}}"\
	dracut -f --kver "%{KVERREL}%{?1:+%{1}}" || exit $?\
fi\
%{nil}

#
# This macro defines a %%post script for a kernel*-modules-core package.
#	%%kernel_modules_core_post [<subpackage>]
#
%define kernel_modules_core_post() \
%{expand:%%posttrans %{?1:%{1}-}modules-core}\
/sbin/depmod -a %{KVERREL}%{?1:+%{1}}\
%{nil}

# This macro defines a %%posttrans script for a kernel package.
#	%%kernel_variant_posttrans [-v <subpackage>] [-u uki-suffix]
# More text can follow to go at the end of this variant's %%post.
#
%define kernel_variant_posttrans(v:u:) \
%{expand:%%posttrans %{?-v:%{-v*}-}%{!?-u*:core}%{?-u*:uki-%{-u*}}}\
%if 0%{!?fedora:1}\
if [ -x %{_sbindir}/weak-modules ]\
then\
    %{_sbindir}/weak-modules --add-kernel %{KVERREL}%{?-v:+%{-v*}} || exit $?\
fi\
%endif\
rm -f %{_localstatedir}/lib/rpm-state/%{name}/installing_core_%{KVERREL}%{?-v:+%{-v*}}\
/bin/kernel-install add %{KVERREL}%{?-v:+%{-v*}} /lib/modules/%{KVERREL}%{?-v:+%{-v*}}/vmlinuz%{?-u:-%{-u*}.efi} || exit $?\
if [[ ! -e "/boot/symvers-%{KVERREL}%{?-v:+%{-v*}}.gz" ]]; then\
    ln -s "/lib/modules/%{KVERREL}%{?-v:+%{-v*}}/symvers.gz" "/boot/symvers-%{KVERREL}%{?-v:+%{-v*}}.gz"\
    command -v restorecon &>/dev/null && restorecon "/boot/symvers-%{KVERREL}%{?-v:+%{-v*}}.gz" \
fi\
%{nil}

#
# This macro defines a %%post script for a kernel package and its devel package.
#	%%kernel_variant_post [-v <subpackage>] [-r <replace>]
# More text can follow to go at the end of this variant's %%post.
#
%define kernel_variant_post(v:r:) \
%{expand:%%kernel_devel_post %{?-v*}}\
%{expand:%%kernel_modules_post %{?-v*}}\
%{expand:%%kernel_modules_core_post %{?-v*}}\
%{expand:%%kernel_modules_extra_post %{?-v*}}\
%{expand:%%kernel_modules_internal_post %{?-v*}}\
%if 0%{!?fedora:1}\
%{expand:%%kernel_modules_partner_post %{?-v*}}\
%endif\
%if "%{-v*}" == "rt" || "%{-v*}" == "rt-debug" || "%{-v*}" == "rt-64k" || "%{-v*}" == "rt-64k-debug"\
%{expand:%%kernel_kvm_post %{?-v*}}\
%endif\
%{expand:%%kernel_variant_posttrans %{?-v*:-v %{-v*}}}\
%{expand:%%post %{?-v*:%{-v*}-}core}\
%{-r:\
if [ `uname -i` == "x86_64" -o `uname -i` == "i386" ] &&\
   [ -f /etc/sysconfig/kernel ]; then\
  /bin/sed -r -i -e 's/^DEFAULTKERNEL=%{-r*}$/DEFAULTKERNEL=kernel%{?-v:-%{-v*}}/' /etc/sysconfig/kernel || exit $?\
fi}\
mkdir -p %{_localstatedir}/lib/rpm-state/%{name}\
touch %{_localstatedir}/lib/rpm-state/%{name}/installing_core_%{KVERREL}%{?-v:+%{-v*}}\
%{nil}

#
# This macro defines a %%preun script for a kernel package.
#	%%kernel_variant_preun [-v <subpackage>] [-u uki-suffix]
#
%define kernel_variant_preun(v:u:) \
%{expand:%%preun %{?-v:%{-v*}-}%{!?-u*:core}%{?-u*:uki-%{-u*}}}\
/bin/kernel-install remove %{KVERREL}%{?-v:+%{-v*}} || exit $?\
if [ -x %{_sbindir}/weak-modules ]\
then\
    %{_sbindir}/weak-modules --remove-kernel %{KVERREL}%{?-v:+%{-v*}} || exit $?\
fi\
%{nil}

%if %{efiuki}
%kernel_variant_posttrans -u virt
%kernel_variant_preun -u virt
%endif

%kernel_variant_preun
%kernel_variant_post -r kernel-smp

%if %{with_pae}
%kernel_variant_preun -v lpae
%kernel_variant_post -v lpae -r (kernel|kernel-smp)
%endif

%if %{with_zfcpdump}
%kernel_variant_preun -v zfcpdump
%kernel_variant_post -v zfcpdump
%endif

%if %{with_arm64_64k}
%kernel_variant_preun -v 64k
%kernel_variant_post -v 64k
%endif

%if %{with_debug} && %{with_arm64_64k}
%kernel_variant_preun -v 64k-debug
%kernel_variant_post -v 64k-debug
%endif

%if %{with_realtime}
%kernel_variant_preun -v rt
%kernel_variant_post -v rt
%endif

%if %{with_debug} && %{with_realtime}
%kernel_variant_preun -v rt-debug
%kernel_variant_post -v rt-debug
%endif

%if %{with_realtime_arm64_64k}
%kernel_variant_preun -v rt-64k
%kernel_variant_post -v rt-64k
%endif

%if %{with_debug} && %{with_realtime_arm64_64k}
%kernel_variant_preun -v rt-64k-debug
%kernel_variant_post -v rt-64k-debug
%endif

%if %{with_debug}
%if %{efiuki}
%kernel_variant_posttrans -v debug -u virt
%kernel_variant_preun -v debug -u virt
%endif
%kernel_variant_preun -v debug
%kernel_variant_post -v debug
%endif

if [ -x /sbin/ldconfig ]
then
    /sbin/ldconfig -X || exit $?
fi

###
### file lists
###

%if %{with_headers}
%files headers
/usr/include/*
%exclude %{_includedir}/cpufreq.h
%exclude %{_includedir}/internal/
%exclude %{_includedir}/perf/
%endif

%if %{with_cross_headers}
%files cross-headers
/usr/*-linux-gnu/include/*
%endif

%if %{with_kernel_abi_stablelists}
%files -n kernel-abi-stablelists
/lib/modules/kabi-*
%endif

%if %{with_kabidw_base}
%ifarch x86_64 s390x ppc64 ppc64le aarch64
%files kernel-kabidw-base-internal
%defattr(-,root,root)
/kabidw-base/%{_target_cpu}/*
%endif
%endif

# only some architecture builds need kernel-doc
%if %{with_doc}
%files doc
%defattr(-,root,root)
%{_datadir}/doc/kernel-doc-%{specversion}-%{pkgrelease}/Documentation/*
%dir %{_datadir}/doc/kernel-doc-%{specversion}-%{pkgrelease}/Documentation
%dir %{_datadir}/doc/kernel-doc-%{specversion}-%{pkgrelease}
%{_datadir}/doc/kernel-doc-%{specversion}-%{pkgrelease}/kernel.changelog.xz
%endif

%if %{with_perf}
%files -n perf
%{_bindir}/perf
%{_libdir}/libperf-jvmti.so
%dir %{_libexecdir}/perf-core
%{_libexecdir}/perf-core/*
%{_datadir}/perf-core/*
%{_mandir}/man[1-8]/perf*
%{_sysconfdir}/bash_completion.d/perf
%doc linux-%{KVERREL}/tools/perf/Documentation/examples.txt
%{_docdir}/perf-tip/tips.txt

%files -n python3-perf
%{python3_sitearch}/*

%files -n libperf
%{_libdir}/libperf.so.0
%{_libdir}/libperf.so.0.0.1

%files -n libperf-devel
%{_libdir}/libperf.so
%{_libdir}/pkgconfig/libperf.pc
%{_includedir}/perf/
%{_includedir}/internal/
%{_mandir}/man3/libperf.*
%{_mandir}/man7/libperf-counting.*
%{_mandir}/man7/libperf-sampling.*
%{_docdir}/libperf/

%if %{with_debuginfo}
%files -f perf-debuginfo.list -n perf-debuginfo

%files -f python3-perf-debuginfo.list -n python3-perf-debuginfo

%files -f libperf-debuginfo.list -n libperf-debuginfo
%endif
# with_perf
%endif

%if %{with_tools}
%ifnarch %{cpupowerarchs}
%files -n kernel-tools
%else
%files -n kernel-tools -f cpupower.lang
%{_bindir}/cpupower
%{_datadir}/bash-completion/completions/cpupower
%ifarch x86_64
%{_bindir}/centrino-decode
%{_bindir}/powernow-k8-decode
%endif
%{_unitdir}/cpupower.service
%{_mandir}/man[1-8]/cpupower*
%config(noreplace) %{_sysconfdir}/sysconfig/cpupower
%ifarch x86_64
%{_bindir}/x86_energy_perf_policy
%{_mandir}/man8/x86_energy_perf_policy*
%{_bindir}/turbostat
%{_mandir}/man8/turbostat*
%{_bindir}/intel-speed-select
%{_sbindir}/intel_sdsi
%endif
# cpupowerarchs
%endif
%{_bindir}/tmon
%{_bindir}/bootconfig
%{_bindir}/iio_event_monitor
%{_bindir}/iio_generic_buffer
%{_bindir}/lsiio
%{_bindir}/lsgpio
%{_bindir}/gpio-hammer
%{_bindir}/gpio-event-mon
%{_bindir}/gpio-watch
%{_mandir}/man1/kvm_stat*
%{_bindir}/kvm_stat
%{_unitdir}/kvm_stat.service
%config(noreplace) %{_sysconfdir}/logrotate.d/kvm_stat
%{_bindir}/page_owner_sort
%{_bindir}/slabinfo

%if %{with_debuginfo}
%files -f kernel-tools-debuginfo.list -n kernel-tools-debuginfo
%endif

%ifarch %{cpupowerarchs}
%files -n kernel-tools-libs
%{_libdir}/libcpupower.so.1
%{_libdir}/libcpupower.so.0.0.1

%files -n kernel-tools-libs-devel
%{_libdir}/libcpupower.so
%{_includedir}/cpufreq.h
%endif

%files -n rtla
%{_bindir}/rtla
%{_bindir}/hwnoise
%{_bindir}/osnoise
%{_bindir}/timerlat
%{_mandir}/man1/rtla-hwnoise.1.gz
%{_mandir}/man1/rtla-osnoise-hist.1.gz
%{_mandir}/man1/rtla-osnoise-top.1.gz
%{_mandir}/man1/rtla-osnoise.1.gz
%{_mandir}/man1/rtla-timerlat-hist.1.gz
%{_mandir}/man1/rtla-timerlat-top.1.gz
%{_mandir}/man1/rtla-timerlat.1.gz
%{_mandir}/man1/rtla.1.gz

%files -n rv
%{_bindir}/rv
%{_mandir}/man1/rv-list.1.gz
%{_mandir}/man1/rv-mon-wip.1.gz
%{_mandir}/man1/rv-mon-wwnr.1.gz
%{_mandir}/man1/rv-mon.1.gz
%{_mandir}/man1/rv.1.gz

# with_tools
%endif

%if %{with_selftests}
%files selftests-internal
%{_libexecdir}/ksamples
%{_libexecdir}/kselftests
%endif

# empty meta-package
%if %{with_up}
%ifnarch %nobuildarches noarch
%files
%endif
%endif

# This is %%{image_install_path} on an arch where that includes ELF files,
# or empty otherwise.
%define elf_image_install_path %{?kernel_image_elf:%{image_install_path}}

#
# This macro defines the %%files sections for a kernel package
# and its devel and debuginfo packages.
#	%%kernel_variant_files [-k vmlinux] <use_vdso> <condition> <subpackage>
#
%define kernel_variant_files(k:) \
%if %{2}\
%{expand:%%files %{?1:-f kernel-%{?3:%{3}-}ldsoconf.list} %{?3:%{3}-}core}\
%{!?_licensedir:%global license %%doc}\
%%license linux-%{KVERREL}/COPYING-%{version}-%{release}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/%{?-k:%{-k*}}%{!?-k:vmlinuz}\
%ghost /%{image_install_path}/%{?-k:%{-k*}}%{!?-k:vmlinuz}-%{KVERREL}%{?3:+%{3}}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/.vmlinuz.hmac \
%ghost /%{image_install_path}/.vmlinuz-%{KVERREL}%{?3:+%{3}}.hmac \
%ifarch %{arm} aarch64\
/lib/modules/%{KVERREL}%{?3:+%{3}}/dtb \
%ghost /%{image_install_path}/dtb-%{KVERREL}%{?3:+%{3}} \
%endif\
%attr(0600, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/System.map\
%ghost %attr(0600, root, root) /boot/System.map-%{KVERREL}%{?3:+%{3}}\
%dir /lib/modules\
%dir /lib/modules/%{KVERREL}%{?3:+%{3}}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/symvers.gz\
/lib/modules/%{KVERREL}%{?3:+%{3}}/config\
/lib/modules/%{KVERREL}%{?3:+%{3}}/modules.builtin*\
%ghost %attr(0600, root, root) /boot/symvers-%{KVERREL}%{?3:+%{3}}.gz\
%ghost %attr(0600, root, root) /boot/initramfs-%{KVERREL}%{?3:+%{3}}.img\
%ghost %attr(0644, root, root) /boot/config-%{KVERREL}%{?3:+%{3}}\
%{expand:%%files -f kernel-%{?3:%{3}-}modules-core.list %{?3:%{3}-}modules-core}\
%dir /lib/modules\
%dir /lib/modules/%{KVERREL}%{?3:+%{3}}\
%dir /lib/modules/%{KVERREL}%{?3:+%{3}}/kernel\
/lib/modules/%{KVERREL}%{?3:+%{3}}/build\
/lib/modules/%{KVERREL}%{?3:+%{3}}/source\
/lib/modules/%{KVERREL}%{?3:+%{3}}/updates\
/lib/modules/%{KVERREL}%{?3:+%{3}}/weak-updates\
/lib/modules/%{KVERREL}%{?3:+%{3}}/systemtap\
%{_datadir}/doc/kernel-keys/%{KVERREL}%{?3:+%{3}}\
%if %{1}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/vdso\
%endif\
/lib/modules/%{KVERREL}%{?3:+%{3}}/modules.block\
/lib/modules/%{KVERREL}%{?3:+%{3}}/modules.drm\
/lib/modules/%{KVERREL}%{?3:+%{3}}/modules.modesetting\
/lib/modules/%{KVERREL}%{?3:+%{3}}/modules.networking\
/lib/modules/%{KVERREL}%{?3:+%{3}}/modules.order\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.alias\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.alias.bin\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.builtin.alias.bin\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.builtin.bin\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.dep\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.dep.bin\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.devname\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.softdep\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.symbols\
%ghost %attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.symbols.bin\
%{expand:%%files -f kernel-%{?3:%{3}-}modules.list %{?3:%{3}-}modules}\
%{expand:%%files %{?3:%{3}-}devel}\
%defverify(not mtime)\
/usr/src/kernels/%{KVERREL}%{?3:+%{3}}\
%{expand:%%files %{?3:%{3}-}devel-matched}\
%{expand:%%files -f kernel-%{?3:%{3}-}modules-extra.list %{?3:%{3}-}modules-extra}\
%config(noreplace) /etc/modprobe.d/*-blacklist.conf\
%{expand:%%files %{?3:%{3}-}modules-internal}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/internal\
%if 0%{!?fedora:1}\
%{expand:%%files %{?3:%{3}-}modules-partner}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/partner\
%endif\
%if "%{3}" == "rt" || "%{3}" == "rt-debug" || "%{3}" == "rt-64k" || "%{3}" == "rt-64k-debug"\
%{expand:%%files %{?3:%{3}-}kvm}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/kvm\
%endif\
%if %{with_debuginfo}\
%ifnarch noarch\
%{expand:%%files -f debuginfo%{?3}.list %{?3:%{3}-}debuginfo}\
%endif\
%endif\
%if %{efiuki}\
%if "%{3}" != "rt" && "%{3}" != "rt-debug" && "%{3}" != "rt-64k" && "%{3}" != "rt-64k-debug"\
%{expand:%%files %{?3:%{3}-}uki-virt}\
%dir /lib/modules\
%dir /lib/modules/%{KVERREL}%{?3:+%{3}}\
%attr(0600, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/System.map\
/lib/modules/%{KVERREL}%{?3:+%{3}}/symvers.gz\
/lib/modules/%{KVERREL}%{?3:+%{3}}/config\
/lib/modules/%{KVERREL}%{?3:+%{3}}/modules.builtin*\
%attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/%{?-k:%{-k*}}%{!?-k:vmlinuz}-virt.efi\
%attr(0644, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/.%{?-k:%{-k*}}%{!?-k:vmlinuz}-virt.efi.hmac\
%ghost /%{image_install_path}/efi/EFI/Linux/%{?-k:%{-k*}}%{!?-k:*}-%{KVERREL}%{?3:+%{3}}.efi\
%{expand:%%files %{?3:%{3}-}uki-virt-addons}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/%{?-k:%{-k*}}%{!?-k:vmlinuz}-virt.efi.extra.d/ \
/lib/modules/%{KVERREL}%{?3:+%{3}}/%{?-k:%{-k*}}%{!?-k:vmlinuz}-virt.efi.extra.d/*.addon.efi\
%endif\
%endif\
%if %{?3:1} %{!?3:0}\
%{expand:%%files %{3}}\
%endif\
%if %{with_gcov}\
%ifnarch %nobuildarches noarch\
%{expand:%%files -f kernel-%{?3:%{3}-}gcov.list %{?3:%{3}-}gcov}\
%endif\
%endif\
%endif\
%{nil}

%kernel_variant_files %{_use_vdso} %{with_up}
%kernel_variant_files %{_use_vdso} %{with_debug} debug
%if %{with_arm64_64k}
%kernel_variant_files %{_use_vdso} %{with_debug} 64k-debug
%endif
%kernel_variant_files %{_use_vdso} %{with_realtime} rt
%if %{with_realtime}
%kernel_variant_files %{_use_vdso} %{with_debug} rt-debug
%endif
%if %{with_realtime_arm64_64k}
%kernel_variant_files %{_use_vdso} %{with_debug} rt-64k-debug
%endif
%if %{with_debug_meta}
%files debug
%files debug-core
%files debug-devel
%files debug-devel-matched
%files debug-modules
%files debug-modules-core
%files debug-modules-extra
%if %{with_arm64_64k}
%files 64k-debug
%files 64k-debug-core
%files 64k-debug-devel
%files 64k-debug-devel-matched
%files 64k-debug-modules
%files 64k-debug-modules-extra
%endif
%endif
%kernel_variant_files %{use_vdso} %{with_pae} lpae
%kernel_variant_files %{_use_vdso} %{with_zfcpdump} zfcpdump
%kernel_variant_files %{_use_vdso} %{with_arm64_64k} 64k
%kernel_variant_files %{_use_vdso} %{with_realtime_arm64_64k} rt-64k

%define kernel_variant_ipaclones(k:) \
%if %{1}\
%if %{with_ipaclones}\
%{expand:%%files %{?2:%{2}-}ipaclones-internal}\
%defattr(-,root,root)\
%defverify(not mtime)\
/usr/src/kernels/%{KVERREL}%{?2:+%{2}}-ipaclones\
%endif\
%endif\
%{nil}

%kernel_variant_ipaclones %{with_up}

# plz don't put in a version string unless you're going to tag
# and build.
#
#
%changelog
* Fri Apr 04 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-578.el9]
- mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs (David Arcari) [RHEL-47428]
- mfd: intel-lpss: Switch over to MSI interrupts (David Arcari) [RHEL-47428]
- main.c: fix initcall blacklisted (Tomas Henzl) [RHEL-83272]
- block: change blk_mq_add_to_batch() third argument type to bool (Ming Lei) [RHEL-79409]
- nvme: move error logging from nvme_end_req() to __nvme_end_req() (Ming Lei) [RHEL-79409]
- block: Name the RQF flags enum (Ming Lei) [RHEL-79409]
- block: fix conversion of GPT partition name to 7-bit (Ming Lei) [RHEL-79409]
- Add CONFIG_SCSI_PROTO_TEST entry (Ming Lei) [RHEL-79409]
- ext4: pass write-hint for buffered IO (Ming Lei) [RHEL-79409]
- scsi: usb: uas: Do not query the IO Advice Hints Grouping mode page for USB/UAS devices (Ming Lei) [RHEL-79409]
- scsi: core: Introduce the BLIST_SKIP_IO_HINTS flag (Ming Lei) [RHEL-79409]
- scsi: sd: Only print updates to permanent stream count (Ming Lei) [RHEL-79409]
- Add CONFIG_OF_PARTITION entry (Ming Lei) [RHEL-79409]
- arm64: patching: avoid early page_to_phys() (Ming Lei) [RHEL-79409]
- arm64: patching: fix handling of execmem addresses (Ming Lei) [RHEL-79409]
- block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei) [RHEL-79409]
- block: Remove zone write plugs when handling native zone append writes (Ming Lei) [RHEL-79409]
- block: make segment size limit workable for > 4K PAGE_SIZE (Ming Lei) [RHEL-79409]
- block: fix NULL pointer dereferenced within __blk_rq_map_sg (Ming Lei) [RHEL-79409]
- block/merge: remove unnecessary min() with UINT_MAX (Ming Lei) [RHEL-79409]
- partitions: mac: fix handling of bogus partition table (Ming Lei) [RHEL-79409]
- block: cleanup and fix batch completion adding conditions (Ming Lei) [RHEL-79409]
- drivers/block/sunvdc.c: update the correct AIP call (Ming Lei) [RHEL-79409]
- block: force noio scope in blk_mq_freeze_queue (Ming Lei) [RHEL-79409]
- block: fix nr_hw_queue update racing with disk addition/removal (Ming Lei) [RHEL-79409]
- block: get rid of request queue ->sysfs_dir_lock (Ming Lei) [RHEL-79409]
- loop: don't clear LO_FLAGS_PARTSCAN on LOOP_SET_STATUS{,64} (Ming Lei) [RHEL-79409]
- blk-mq: create correct map for fallback case (Ming Lei) [RHEL-79409]
- block: don't revert iter for -EIOCBQUEUED (Ming Lei) [RHEL-79409]
- block: Don't trim an atomic write (Ming Lei) [RHEL-79409]
- block: limit disk max sectors to (LLONG_MAX >> 9) (Ming Lei) [RHEL-79409]
- block: Change blk_stack_atomic_writes_limits() unit_min check (Ming Lei) [RHEL-79409]
- blk-mq: Move more error handling into blk_mq_submit_bio() (Ming Lei) [RHEL-79409]
- block: Reorder the request allocation code in blk_mq_submit_bio() (Ming Lei) [RHEL-79409]
- partitions: ldm: remove the initial kernel-doc notation (Ming Lei) [RHEL-79409]
- blk-cgroup: rwstat: fix kernel-doc warnings in header file (Ming Lei) [RHEL-79409]
- blk-cgroup: fix kernel-doc warnings in header file (Ming Lei) [RHEL-79409]
- block: mark GFP_NOIO around sysfs ->store() (Ming Lei) [RHEL-79409]
- loop: remove the use_dio field in struct loop_device (Ming Lei) [RHEL-79409]
- loop: don't freeze the queue in loop_update_dio (Ming Lei) [RHEL-79409]
- loop: allow loop_set_status to re-enable direct I/O (Ming Lei) [RHEL-79409]
- loop: open code the direct I/O flag update in loop_set_dio (Ming Lei) [RHEL-79409]
- loop: only write back pagecache when starting to to use direct I/O (Ming Lei) [RHEL-79409]
- loop: create a lo_can_use_dio helper (Ming Lei) [RHEL-79409]
- loop: update commands in loop_set_status still referring to transfers (Ming Lei) [RHEL-79409]
- loop: move updating lo_flags out of loop_set_status_from_info (Ming Lei) [RHEL-79409]
- nbd: don't allow reconnect after disconnect (Ming Lei) [RHEL-79409]
- block: simplify tag allocation policy selection (Ming Lei) [RHEL-79409]
- block: remove BLK_MQ_F_NO_SCHED (Ming Lei) [RHEL-79409]
- block: remove blk_mq_init_bitmaps (Ming Lei) [RHEL-79409]
- block: better split mq vs non-mq code in add_disk_fwnode (Ming Lei) [RHEL-79409]
- block: add a dma mapping iterator (Ming Lei) [RHEL-79409]
- block: use page_to_phys in bvec_phys (Ming Lei) [RHEL-79409]
- block: remove blk_rq_bio_prep (Ming Lei) [RHEL-79409]
- block: remove bio_add_pc_page (Ming Lei) [RHEL-79409]
- block/blk-map: Remove set but unused variable 'added' (Ming Lei) [RHEL-79409]
- ps3disk: Do not use dev->bounce_size before it is set (Ming Lei) [RHEL-79409]
- block: retry call probe after request_module in blk_request_module (Ming Lei) [RHEL-79409]
- kyber: constify sysfs attributes (Ming Lei) [RHEL-79409]
- block, bfq: constify sysfs attributes (Ming Lei) [RHEL-79409]
- block: mq-deadline: Constify sysfs attributes (Ming Lei) [RHEL-79409]
- elevator: Enable const sysfs attributes (Ming Lei) [RHEL-79409]
- blk-zoned: Split queue_zone_wplugs_show() (Ming Lei) [RHEL-79409]
- blk-zoned: Improve the queue reference count strategy documentation (Ming Lei) [RHEL-79409]
- blk-zoned: Document locking assumptions (Ming Lei) [RHEL-79409]
- blk-zoned: Minimize #include directives (Ming Lei) [RHEL-79409]
- block: remove BLK_MQ_F_SHOULD_MERGE (Ming Lei) [RHEL-79409]
- blk-mq: remove unused queue mapping helpers (Ming Lei) [RHEL-79409]
- virtio: blk/scsi: replace blk_mq_virtio_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
- nvme: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
- scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
- blk-mq: introduce blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
- virtio: hookup irq_get_affinity callback (Ming Lei) [RHEL-79409]
- PCI: hookup irq_get_affinity callback (Ming Lei) [RHEL-79409]
- driver core: bus: add irq_get_affinity callback to bus_type (Ming Lei) [RHEL-79409]
- null_blk: Remove accesses to page->index (Ming Lei) [RHEL-79409]
- blktrace: remove redundant return at end of function (Ming Lei) [RHEL-79409]
- block: Delete bio_prio() (Ming Lei) [RHEL-79409]
- blktrace: move copy_[to|from]_user() out of ->debugfs_lock (Ming Lei) [RHEL-79409]
- blktrace: don't centralize grabbing q->debugfs_mutex in blk_trace_ioctl (Ming Lei) [RHEL-79409]
- null_blk: Add rotational feature support (Ming Lei) [RHEL-79409]
- block: track queue dying state automatically for modeling queue freeze lockdep (Ming Lei) [RHEL-79409]
- block: don't verify queue freeze manually in elevator_init_mq() (Ming Lei) [RHEL-79409]
- block: track disk DEAD state automatically for modeling queue freeze lockdep (Ming Lei) [RHEL-79409]
- block: remove unnecessary check in blk_unfreeze_check_owner() (Ming Lei) [RHEL-79409]
- asm-generic: add an optional pfn_valid check to page_to_phys (Ming Lei) [RHEL-79409]
- asm-generic: provide generic page_to_phys and phys_to_page implementations (Ming Lei) [RHEL-79409]
- cdrom: Fix typo, 'devicen' to 'device' (Ming Lei) [RHEL-79409]
- block: avoid to reuse `hctx` not removed from cpuhp callback list (Ming Lei) [RHEL-79409]
- nvme: use blk_validate_block_size() for max LBA check (Ming Lei) [RHEL-79409]
- block/bdev: use helper for max block size check (Ming Lei) [RHEL-79409]
- block: Fix queue_iostats_passthrough_show() (Ming Lei) [RHEL-79409]
- blk-mq: Clean up blk_mq_requeue_work() (Ming Lei) [RHEL-79409]
- mq-deadline: Remove a local variable (Ming Lei) [RHEL-79409]
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Ming Lei) [RHEL-79409]
- block: Make bio_iov_bvec_set() accept pointer to const iov_iter (Ming Lei) [RHEL-79409]
- block: get wp_offset by bdev_offset_from_zone_start (Ming Lei) [RHEL-79409]
- blk-mq: move cpuhp callback registering out of q->sysfs_lock (Ming Lei) [RHEL-79409]
- blk-mq: register cpuhp callback after hctx is added to xarray table (Ming Lei) [RHEL-79409]
- virtio-blk: don't keep queue frozen during system suspend (Ming Lei) [RHEL-79409]
- brd: decrease the number of allocated pages which discarded (Ming Lei) [RHEL-79409]
- block: Don't allow an atomic write be truncated in blkdev_write_iter() (Ming Lei) [RHEL-79409]
- fs: Export generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
- block: Add bdev atomic write limits helpers (Ming Lei) [RHEL-79409]
- fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
- block/fs: Pass an iocb to generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
- mq-deadline: don't call req_get_ioprio from the I/O completion handler (Ming Lei) [RHEL-79409]
- block: Remove extra part pointer NULLify in blk_rq_init() (Ming Lei) [RHEL-79409]
- block: return bool from get_disk_ro and bdev_read_only (Ming Lei) [RHEL-79409]
- block: remove a duplicate definition for bdev_read_only (Ming Lei) [RHEL-79409]
- block: return bool from blk_rq_aligned (Ming Lei) [RHEL-79409]
- block: return unsigned int from blk_lim_dma_alignment_and_pad (Ming Lei) [RHEL-79409]
- block: return unsigned int from queue_dma_alignment (Ming Lei) [RHEL-79409]
- block: return unsigned int from bdev_io_opt (Ming Lei) [RHEL-79409]
- block: req->bio is always set in the merge code (Ming Lei) [RHEL-79409]
- block: don't bother checking the data direction for merges (Ming Lei) [RHEL-79409]
- block: blk-mq: fix uninit-value in blk_rq_prep_clone and refactor (Ming Lei) [RHEL-79409]
- block: Add extra checks in blk_validate_atomic_write_limits() (Ming Lei) [RHEL-79409]
- block: Drop granularity check in queue_limit_discard_alignment() (Ming Lei) [RHEL-79409]
- block: return unsigned int from bdev_io_min (Ming Lei) [RHEL-79409]
- blk-settings: round down io_opt to physical_block_size (Ming Lei) [RHEL-79409]
- nvme/multipath: Fix RCU list traversal to use SRCU primitive (Ming Lei) [RHEL-79409]
- block: make struct rq_list available for !CONFIG_BLOCK (Ming Lei) [RHEL-79409]
- block/genhd: use seq_put_decimal_ull for diskstats decimal values (Ming Lei) [RHEL-79409]
- block: don't reorder requests in blk_mq_add_to_batch (Ming Lei) [RHEL-79409]
- block: don't reorder requests in blk_add_rq_to_plug (Ming Lei) [RHEL-79409]
- block: add a rq_list type (Ming Lei) [RHEL-79409]
- block: remove rq_list_move (Ming Lei) [RHEL-79409]
- virtio_blk: reverse request order in virtio_queue_rqs (Ming Lei) [RHEL-79409]
- nvme-pci: reverse request order in nvme_queue_rqs (Ming Lei) [RHEL-79409]
- block: export blk_validate_limits (Ming Lei) [RHEL-79409]
- block: remove the ioprio field from struct request (Ming Lei) [RHEL-79409]
- block: remove the write_hint field from struct request (Ming Lei) [RHEL-79409]
- scsi: sd: Translate data lifetime information (Ming Lei) [RHEL-79409]
- scsi: scsi_proto: Add structures and constants related to I/O groups and streams (Ming Lei) [RHEL-79409]
- scsi: core: Query the Block Limits Extension VPD page (Ming Lei) [RHEL-79409]
- block, fs: Restore the per-bio/request data lifetime fields (Ming Lei) [RHEL-79409]
- fs: Propagate write hints to the struct block_device inode (Ming Lei) [RHEL-79409]
- fs: Move enum rw_hint into a new header file (Ming Lei) [RHEL-79409]
- fs: Split fcntl_rw_hint() (Ming Lei) [RHEL-79409]
- fs: Verify write lifetime constants at compile time (Ming Lei) [RHEL-79409]
- fs: Fix rw_hint validation (Ming Lei) [RHEL-79409]
- nvme-multipath: don't bother clearing max_hw_zone_append_sectors (Ming Lei) [RHEL-79409]
- block: pre-calculate max_zone_append_sectors (Ming Lei) [RHEL-79409]
- block: lift bio_is_zone_append to bio.h (Ming Lei) [RHEL-79409]
- block: fix bio_split_rw_at to take zone_write_granularity into account (Ming Lei) [RHEL-79409]
- block: take chunk_sectors into account in bio_split_write_zeroes (Ming Lei) [RHEL-79409]
- block: Handle bio_split() errors in bio_submit_split() (Ming Lei) [RHEL-79409]
- block: Error an attempt to split an atomic write in bio_split() (Ming Lei) [RHEL-79409]
- block: Rework bio_split() return value (Ming Lei) [RHEL-79409]
- s390/dasd: Fix typo in comment (Ming Lei) [RHEL-79409]
- s390/dasd: fix redundant /proc/dasd* entries removal (Ming Lei) [RHEL-79409]
- block: don't verify IO lock for freeze/unfreeze in elevator_init_mq() (Ming Lei) [RHEL-79409]
- block: always verify unfreeze lock on the owner task (Ming Lei) [RHEL-79409]
- rbd: unfreeze queue after marking disk as dead (Ming Lei) [RHEL-79409]
- block: remove blk_freeze_queue() (Ming Lei) [RHEL-79409]
- block: Replace sprintf() with sysfs_emit() (Ming Lei) [RHEL-79409]
- nvme: add reservation command's defines (Ming Lei) [RHEL-79409]
- mtip32xx: Replace deprecated PCI functions (Ming Lei) [RHEL-79409]
- block: remove the max_zone_append_sectors check in blk_revalidate_disk_zones (Ming Lei) [RHEL-79409]
- block: update blk_stack_limits documentation (Ming Lei) [RHEL-79409]
- lib/iov_iter: fix bvec iterator setup (Ming Lei) [RHEL-79409]
- block: remove bio_add_zone_append_page (Ming Lei) [RHEL-79409]
- lib/iov_iter.c: initialize bi.bi_idx before iterating over bvec (Ming Lei) [RHEL-79409]
- blk-integrity: remove seed for user mapped buffers (Ming Lei) [RHEL-79409]
- block: set bip_vcnt correctly (Ming Lei) [RHEL-79409]
- block: add a bdev_limits helper (Ming Lei) [RHEL-79409]
- iov_iter: don't require contiguous pages in iov_iter_extract_bvec_pages (Ming Lei) [RHEL-79409]
- block: model freeze & enter queue as lock for supporting lockdep (Ming Lei) [RHEL-79409]
- nvme: core: switch to non_owner variant of start_freeze/unfreeze queue (Ming Lei) [RHEL-79409]
- blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs (Ming Lei) [RHEL-79409]
- blk-mq: Unexport blk_mq_flush_busy_ctxs() (Ming Lei) [RHEL-79409]
- blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long (Ming Lei) [RHEL-79409]
- block: remove redundant explicit memory barrier from rq_qos waiter and waker (Ming Lei) [RHEL-79409]
- block: flush all throttled bios when deleting the cgroup (Ming Lei) [RHEL-79409]
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Ming Lei) [RHEL-79409]
- block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding (Ming Lei) [RHEL-79409]
- block: fix missing dispatching request when queue is started or unquiesced (Ming Lei) [RHEL-79409]
- Revert "blk-throttle: Fix IO hang for a corner case" (Ming Lei) [RHEL-79409]
- block: replace call_rcu by kfree_rcu for simple kmem_cache_free callback (Ming Lei) [RHEL-79409]
- block: enable passthrough command statistics (Ming Lei) [RHEL-79409]
- block: add partition uuid into uevent as "PARTUUID" (Ming Lei) [RHEL-79409]
- block: move issue side time stamping to blk_account_io_start() (Ming Lei) [RHEL-79409]
- block: set issue time stamp based on queue state (Ming Lei) [RHEL-79409]
- block: add support for partition table defined in OF (Ming Lei) [RHEL-79409]
- mmc: block: attach partitions fwnode if found in mmc-card (Ming Lei) [RHEL-79409]
- block: introduce add_disk_fwnode() (Ming Lei) [RHEL-79409]
- docs: block: Document support for read-only partition in cmdline part (Ming Lei) [RHEL-79409]
- block: add support for defining read-only partitions (Ming Lei) [RHEL-79409]
- block: kill blk_do_io_stat() helper (Ming Lei) [RHEL-79409]
- block: remove 'req->part' check for stats accounting (Ming Lei) [RHEL-79409]
- block: remove redundant passthrough check in blk_mq_need_time_stamp() (Ming Lei) [RHEL-79409]
- block: move iostat check into blk_acount_io_start() (Ming Lei) [RHEL-79409]
- bdev: move ->bd_make_it_fail to ->__bd_flags (Ming Lei) [RHEL-79409]
- bdev: move ->bd_ro_warned to ->__bd_flags (Ming Lei) [RHEL-79409]
- bdev: move ->bd_has_subit_bio to ->__bd_flags (Ming Lei) [RHEL-79409]
- bdev: move ->bd_write_holder into ->__bd_flags (Ming Lei) [RHEL-79409]
- bdev: move ->bd_read_only to ->__bd_flags (Ming Lei) [RHEL-79409]
- bdev: infrastructure for flags (Ming Lei) [RHEL-79409]
- wrapper for access to ->bd_partno (Ming Lei) [RHEL-79409]
- Use bdev_is_paritition() instead of open-coding it (Ming Lei) [RHEL-79409]
- nfsd: clear acl_access/acl_default after releasing them (Olga Kornievskaia) [RHEL-81523] {CVE-2025-21796}
- vfio/pci: Fallback huge faults for unaligned pfn (Donald Dutile) [RHEL-73613]
- vfio/pci: implement huge_fault support (Donald Dutile) [RHEL-73613]
- vfio/pci: Remove unused struct 'vfio_pci_mmap_vma' (Donald Dutile) [RHEL-73613]
- vfio/pci: Insert full vma on mmap'd MMIO fault (Donald Dutile) [RHEL-73613]
- vfio/pci: Use unmap_mapping_range() (Donald Dutile) [RHEL-73613]
- mm/arm64: support large pfn mappings (Donald Dutile) [RHEL-73613]
- mm/x86: support large pfn mappings (Donald Dutile) [RHEL-73613]
- mm: remove follow_pte() (Donald Dutile) [RHEL-73613]
- mm: follow_pte() improvements (Donald Dutile) [RHEL-73613]
- mm/access_process_vm: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
- vfio: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
- mm/x86/pat: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
- s390/pci_mmio: use follow_pfnmap API (Donald Dutile) [RHEL-73613]
- KVM: use follow_pfnmap API (Donald Dutile) [RHEL-73613]
- mm: pass VMA instead of MM to follow_pte() (Donald Dutile) [RHEL-73613]
- mm: move follow_phys to arch/x86/mm/pat/memtype.c (Donald Dutile) [RHEL-73613]
- mm: fix follow_pfnmap API lockdep assert (Donald Dutile) [RHEL-73613]
- mm: new follow_pfnmap API (Donald Dutile) [RHEL-73613]
- mm: remove follow_pfn (Donald Dutile) [RHEL-73613]
- mm: always define pxx_pgprot() (Donald Dutile) [RHEL-73613]
- mm/huge_memory: check pmd_special() only after pmd_present() (Donald Dutile) [RHEL-73613]
- mm/fork: accept huge pfnmap entries (Donald Dutile) [RHEL-73613]
- mm/pagewalk: check pfnmap for folio_walk_start() (Donald Dutile) [RHEL-73613]
- mm/gup: detect huge pfnmap entries in gup-fast (Donald Dutile) [RHEL-73613]
- mm: mark special bits for huge pfn mappings when inject (Donald Dutile) [RHEL-73613]
- mm: drop is_huge_zero_pud() (Donald Dutile) [RHEL-73613]
- mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud (Donald Dutile) [RHEL-73613]
- KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() (Gavin Shan) [RHEL-82298]
- KVM: arm64: Initialize HCR_EL2.E2H early (Gavin Shan) [RHEL-82298]
- KVM: arm64: Shave a few bytes from the EL2 idmap code (Gavin Shan) [RHEL-82298]
- KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2 (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fix tcr_el2 initialisation in hVHE mode (Gavin Shan) [RHEL-82298]
- KVM: arm64: vgic: Hoist SGI/PPI alloc from vgic_init() to kvm_create_vgic() (Gavin Shan) [RHEL-82298]
- KVM: arm64: timer: Drop warning on failed interrupt signalling (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fix alignment of kvm_hyp_memcache allocations (Gavin Shan) [RHEL-82298]
- KVM: arm64: Simplify warning in kvm_arch_vcpu_load_fp() (Gavin Shan) [RHEL-82298]
- KVM: arm64: timer: Always evaluate the need for a soft timer (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fix nested S2 MMU structures reallocation (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fail protected mode init if no vgic hardware is present (Gavin Shan) [RHEL-82298]
- KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-82298]
- KVM: arm64: Mark some header functions as inline (Gavin Shan) [RHEL-82298]
- KVM: arm64: Refactor exit handlers (Gavin Shan) [RHEL-82298]
- KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Gavin Shan) [RHEL-82298]
- KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Gavin Shan) [RHEL-82298]
- KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Gavin Shan) [RHEL-82298]
- KVM: arm64: Add predicate for FPMR support in a VM (Gavin Shan) [RHEL-82298]
- KVM: arm64: Flush hyp bss section after initialization of variables in bss (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fix selftests after sysreg field name update (Gavin Shan) [RHEL-82298]
- KVM: arm64: Explicitly handle BRBE traps as UNDEFINED (Gavin Shan) [RHEL-82298]
- KVM: arm64: vgic: Use str_enabled_disabled() in vgic_v3_probe() (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fix nVHE stacktrace VA bits mask (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fix FEAT_MTE in pKVM (Gavin Shan) [RHEL-82298]
- KVM: arm64: nv: Advertise the lack of AArch32 EL0 support (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fix the value of the CPTR_EL2 RES1 bitmask for nVHE (Gavin Shan) [RHEL-82298]
- KVM: arm64: Calculate cptr_el2 traps on activating traps (Gavin Shan) [RHEL-82298]
- KVM: arm64: Fix RAS trapping in pKVM for protected VMs (Gavin Shan) [RHEL-82298]
- KVM: arm64: Drop MDSCR_EL1_DEBUG_MASK (Gavin Shan) [RHEL-82298]
- arm64/kvm: Avoid invalid physical addresses to signal owner updates (Gavin Shan) [RHEL-82298]
- arm64/kvm: Configure HYP TCR.PS/DS based on host stage1 (Gavin Shan) [RHEL-82298]
- KVM: arm64: nv: Reload PMU events upon MDCR_EL2.HPME change (Gavin Shan) [RHEL-82298]
- KVM: arm64: Use KVM_REQ_RELOAD_PMU to handle PMCR_EL0.E change (Gavin Shan) [RHEL-82298]
- KVM: arm64: Add unified helper for reprogramming counters by mask (Gavin Shan) [RHEL-82298]
- KVM: arm64: Always check the state from hyp_ack_unshare() (Gavin Shan) [RHEL-82298]
- soc: qcom: socinfo: Avoid out of bounds read of serial number (Jared Kangas) [RHEL-85597] {CVE-2024-58007}
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Jared Kangas) [RHEL-85597]
- soc: qcom: Add check devm_kasprintf() returned value (Jared Kangas) [RHEL-85597]
- mm/mm_init.c: print mem_init info after defer_init is done (Eric Chanudet) [RHEL-85565]
- x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior [partial] (David Arcari) [RHEL-85522]
- intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (David Arcari) [RHEL-85522]
- intel_idle: introduce 'no_native' module parameter (David Arcari) [RHEL-85522]
- intel_idle: clean up BYT/CHT auto demotion disable (David Arcari) [RHEL-85522]
- intel_idle: Provide the default enter_dead() handler (David Arcari) [RHEL-85522]
- ACPI/processor_idle: Export acpi_processor_ffh_play_dead() (David Arcari) [RHEL-85522]
- ACPI/processor_idle: Add FFH state handling (David Arcari) [RHEL-85522]
- x86/smp: Allow calling mwait_play_dead with an arbitrary hint (David Arcari) [RHEL-85522]
- cpuidle: Change :enter_dead() driver callback return type to void (David Arcari) [RHEL-85522]
- cpuidle: Do not return from cpuidle_play_dead() on callback failures (David Arcari) [RHEL-85522]
- x86/cpu: Remove unnecessary MwAIT leaf checks (David Arcari) [RHEL-85522]
- intel_idle: add Clearwater Forest SoC support (David Arcari) [RHEL-45063]
- sched/stats: Print domain name in /proc/schedstat (Phil Auld) [RHEL-23495]
- docs: Update Schedstat version to 17 (Phil Auld) [RHEL-23495]
- sched/fair: Cleanup in migrate_degrades_locality() to improve readability (Phil Auld) [RHEL-23495]
- sched: Report the different kinds of imbalances in /proc/schedstat (Phil Auld) [RHEL-23495]
- sched: Move sched domain name out of CONFIG_SCHED_DEBUG (Phil Auld) [RHEL-23495]
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (Phil Auld) [RHEL-23495]
- RDMA/core: Support link status events dispatching (Kamal Heib) [RHEL-78087]
- RDMA/core: Add ib_query_netdev_port() to query netdev port by IB device. (Kamal Heib) [RHEL-78087]
- RDMA/core: Remove unused ib_copy_path_rec_from_user (Kamal Heib) [RHEL-78087]
- RDMA/core: Remove unused ibdev_printk (Kamal Heib) [RHEL-78087]
- RDMA/core: Remove unused ib_find_exact_cached_pkey (Kamal Heib) [RHEL-78087]
- RDMA/core: Remove unused ib_ud_header_unpack (Kamal Heib) [RHEL-78087]
- RDMA/srp: Fix error handling in srp_add_port (Kamal Heib) [RHEL-78087]
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-81522] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-81522]
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-81522]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-81522]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-81522]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-69649 RHEL-83224] {CVE-2025-21864}
- cpufreq: intel_pstate: Avoid SMP calls to get cpu-type (David Arcari) [RHEL-85517]
- x86/cpu: Add CPU type to struct cpuinfo_topology (David Arcari) [RHEL-85517]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (David Arcari) [RHEL-85517]
- cpufreq: intel_pstate: Relocate platform preference check (David Arcari) [RHEL-85517]
- cpufreq: intel_pstate: Make it possible to avoid enabling CAS (David Arcari) [RHEL-85517]
- cpufreq: intel_pstate: Use CPUFREQ_POLICY_UNKNOWN (David Arcari) [RHEL-85517]
- cpufreq: intel_pstate: Drop Arrow Lake from "scaling factor" list (David Arcari) [RHEL-85517]
- cpufreq: intel_pstate: Use CPPC to get scaling factors (David Arcari) [RHEL-85517]
- cpufreq: intel_pstate: Rearrange locking in hybrid_init_cpu_capacity_scaling() (David Arcari) [RHEL-85517]
- cpufreq: intel_pstate: Clear hybrid_max_perf_cpu before driver registration (David Arcari) [RHEL-85517]
- cpufreq: intel_pstate: Fix energy_performance_preference for passive (David Arcari) [RHEL-85517]

* Mon Mar 31 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-577.el9]
- xfs: fix freeing speculative preallocations for preallocated files (CKI Backport Bot) [RHEL-56816]
- i2c: i801: Add lis3lv02d for Dell Precision M6800 (David Arcari) [RHEL-47426]
- platform/x86: dell-smo8800: Add support for probing for the accelerometer i2c address (David Arcari) [RHEL-47426]
- platform/x86: dell-smo8800: Add a couple more models to lis3lv02d_devices[] (David Arcari) [RHEL-47426]
- i2c: i801: Remove unnecessary PCI function call (David Arcari) [RHEL-47426]
- platform/x86: dell-smo8800: Move instantiation of lis3lv02d i2c_client from i2c-i801 to dell-lis3lv02d (David Arcari) [RHEL-47426]
- platform/x86: dell-smo8800: Move SMO88xx acpi_device_ids to dell-smo8800-ids.h (David Arcari) [RHEL-47426]
- platform/x86: dell: dell-smo8800: Convert to platform remove callback returning void (David Arcari) [RHEL-47426]
- platform/x86: dell-smo8800: Use min_t() for comparison and assignment (David Arcari) [RHEL-47426]
- platform/x86: dell-smo8800: Convert to be a platform driver (David Arcari) [RHEL-47426]
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (David Arcari) [RHEL-47426]
- i2c: i801: Add support for Intel Panther Lake (David Arcari) [RHEL-47426]
- i2c: i801: Use a different adapter-name for IDF adapters (David Arcari) [RHEL-47426]
- i2c: i801: reword according to newest specification (David Arcari) [RHEL-47426]
- i2c: i801: remove printout on handled timeouts (David Arcari) [RHEL-47426]
- i2c: i801: Annotate apanel_addr as __ro_after_init (David Arcari) [RHEL-47426]
- i2c: i801: Remove usage of I2C_CLASS_SPD (David Arcari) [RHEL-47426]
- i2c: i801: Fix missing Kconfig dependency (David Arcari) [RHEL-47426]
- i2c: i801: Call i2c_register_spd for muxed child segments (David Arcari) [RHEL-47426]
- i2c: i801: Fix a refactoring that broke a touchpad on Lenovo P1 (David Arcari) [RHEL-47426]
- i2c: i801: Avoid potential double call to gpiod_remove_lookup_table (David Arcari) [RHEL-47426]
- i2c: i801: Fix using mux_pdev before it's set (David Arcari) [RHEL-47426]
- i2c: i801: Add helper i801_get_block_len (David Arcari) [RHEL-47426]
- i2c: i801: Add SMBUS_LEN_SENTINEL (David Arcari) [RHEL-47426]
- i2c: i801: Split i801_block_transaction (David Arcari) [RHEL-47426]
- i2c: i801: Add helper i801_check_and_clear_pec_error (David Arcari) [RHEL-47426]
- i2c: i801: Define FEATURES_ICH5 as an extension of FEATURES_ICH4 (David Arcari) [RHEL-47426]
- i2c: i801: Remove unused argument from tco functions (David Arcari) [RHEL-47426]
- i2c: i801: Replace magic value with constant in dmi_check_onboard_devices (David Arcari) [RHEL-47426]
- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (David Arcari) [RHEL-47426]
- i2c: i801: Add lis3lv02d for Dell Precision 3540 (David Arcari) [RHEL-47426]
- i2c: i801: Use new helper acpi_use_parent_companion (David Arcari) [RHEL-47426]
- ACPI: Add helper acpi_use_parent_companion (David Arcari) [RHEL-47426]
- i2c: i801: Simplify class-based client device instantiation (David Arcari) [RHEL-47426]
- i2c: i801: replace acpi_lock with I2C bus lock (David Arcari) [RHEL-47426]
- i2c: i801: use i2c_mark_adapter_suspended/resumed (David Arcari) [RHEL-47426]
- i2c: i801: simplify module boilerplate code (David Arcari) [RHEL-47426]
- i2c: i801: add helper i801_restore_regs (David Arcari) [RHEL-47426]
- tracing/histogram: Fix semicolon.cocci warnings (Tomas Glozar) [RHEL-67679]
- tracing/histogram: Fix documentation inline emphasis warning (Tomas Glozar) [RHEL-67679]
- tracing/histogram: Fix check for missing operands in an expression (Tomas Glozar) [RHEL-67679]
- tracing/histogram: Document expression arithmetic and constants (Tomas Glozar) [RHEL-67679]
- tracing/histogram: Optimize division by a power of 2 (Tomas Glozar) [RHEL-67679]
- tracing/histogram: Covert expr to const if both operands are constants (Tomas Glozar) [RHEL-67679]
- tracing/histogram: Simplify handling of .sym-offset in expressions (Tomas Glozar) [RHEL-67679]
- tracing: Fix operator precedence for hist triggers expression (Tomas Glozar) [RHEL-67679]
- tracing: Add division and multiplication support for hist triggers (Tomas Glozar) [RHEL-67679]
- tracing: Add support for creating hist trigger variables from literal (Tomas Glozar) [RHEL-67679]
- tracing: Have histogram types be constant when possible (Tomas Glozar) [RHEL-67679]
- powercap: intel_rapl: Add support for Panther Lake platform (David Arcari) [RHEL-47408]
- powercap: call put_device() on an error path in powercap_register_control_type() (David Arcari) [RHEL-47408]
- ext4: fallback to complex scan if aligned scan doesn't work (Brian Foster) [RHEL-83284]
- nfsd: adjust WARN_ON_ONCE in revoke_delegation (Olga Kornievskaia) [RHEL-74439]
- uki: get rid of RHEL-only walinuxagentcvm module in the initramfs (Vitaly Kuznetsov) [RHEL-83003]
- ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CKI Backport Bot) [RHEL-82517] {CVE-2024-58077}
- team: better TEAM_OPTION_TYPE_STRING validation (CKI Backport Bot) [RHEL-81462] {CVE-2025-21787}
- redhat: drop Y issues from changelog (Jan Stancek)
- Reapply "perf util: Make util its own library" (Michael Petlan) [RHEL-79032]
- iommu/vt-d: Fix suspicious RCU usage (Jerry Snitselaar) [RHEL-70102]
- iommu/vt-d: Remove device comparison in context_setup_pass_through_cb (Jerry Snitselaar) [RHEL-70102]
- Revert "x86: bring back rep movsq for user access on CPUs without ERMS" (Herton R. Krzesinski) [RHEL-79780]
- net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75649] {CVE-2025-21663}
- net: stmmac: Fix zero-division error when disabling tc cbs (Izabela Bakollari) [RHEL-63931] {CVE-2024-49977}
- configs: enable FW_CACHE on centos-stream/rhel 9 for nouveau (Dave Airlie) [RHEL-79929]
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [RHEL-80224]
- gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-77720]
- gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-77720]
- gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-77720]
- gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-77720]
- gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-77720]
- gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-77720]
- gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-77720]
- gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-77720]
- gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-77720]
- gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-77720]
- gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-77720]
- gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-77720]
- gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-77720]
- gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-77720]
- gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-77720]
- scsi: qla2xxx: Fix use after free on unload (Ewan D. Milne) [RHEL-75828] {CVE-2024-56623}
- nfsd: validate the nfsd_serv pointer before calling svc_wake_up (Olga Kornievskaia) [RHEL-69769]

* Thu Mar 27 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-576.el9]
- md/raid1: fix memory leak in raid1_run() if no active rdev (Nigel Croxon) [RHEL-83988]
- md/raid1: don't free conf on raid0_run failure (Nigel Croxon) [RHEL-83988]
- md/raid0: don't free conf on raid0_run failure (Nigel Croxon) [RHEL-83988]
- md: switch personalities faulty multipath to use md_submodule_head (Nigel Croxon) [RHEL-83988]
- async_xor: Remove unused 'async_xor_val' (Nigel Croxon) [RHEL-83988]
- md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Nigel Croxon) [RHEL-83988]
- md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Nigel Croxon) [RHEL-83988]
- md/raid1,raid10: don't ignore IO flags (Nigel Croxon) [RHEL-83988]
- md/raid5: merge reshape_progress checking inside get_reshape_loc() (Nigel Croxon) [RHEL-83988]
- md: fix mddev uaf while iterating all_mddevs list (Nigel Croxon) [RHEL-83988]
- md: switch md-cluster to use md_submodle_head (Nigel Croxon) [RHEL-83988]
- md: switch personalities to use md_submodule_head (Nigel Croxon) [RHEL-83988]
- md: don't export md_cluster_ops (Nigel Croxon) [RHEL-83988]
- md/md-cluster: cleanup md_cluster_ops reference (Nigel Croxon) [RHEL-83988]
- md: introduce struct md_submodule_head and APIs (Nigel Croxon) [RHEL-83988]
- md: only include md-cluster.h if necessary (Nigel Croxon) [RHEL-83988]
- md: merge common code into find_pers() (Nigel Croxon) [RHEL-83988]
- md: ensure resync is prioritized over recovery (Nigel Croxon) [RHEL-83988]
- md: Fix linear_set_limits() (Nigel Croxon) [RHEL-83988]
- md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-83988]
- md: reintroduce md-linear (Nigel Croxon) [RHEL-83988]
- md: Remove deprecated CONFIG_MD_LINEAR (Nigel Croxon) [RHEL-83988]
- md/linear: Get rid of md-linear.h (Nigel Croxon) [RHEL-83988]
- md/md-linear: Annotate struct linear_conf with __counted_by (Nigel Croxon) [RHEL-83988]
- Revert "Upstream has changed the APIs to suspend the array." (Nigel Croxon) [RHEL-83988]
- Revert "md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add()" (Nigel Croxon) [RHEL-83988]
- bpf: Remove unnecessary BTF lookups in bpf_sk_storage_tracing_allowed (CKI Backport Bot) [RHEL-82439]
- tools/power turbostat: version 2025.02.02 (David Arcari) [RHEL-84464]
- tools/power turbostat: Add CPU%%c1e BIC for CWF (David Arcari) [RHEL-84464]
- tools/power turbostat: Harden one-shot mode against cpu offline (David Arcari) [RHEL-84464]
- tools/power turbostat: Fix forked child affinity regression (David Arcari) [RHEL-84464]
- tools/power turbostat: Add tcore clock PMT type (David Arcari) [RHEL-84464]
- tools/power turbostat: version 2025.01.14 (David Arcari) [RHEL-84464]
- tools/power turbostat: Allow adding PMT counters directly by sysfs path (David Arcari) [RHEL-84464]
- tools/power turbostat: Allow mapping multiple PMT files with the same GUID (David Arcari) [RHEL-84464]
- tools/power turbostat: Add PMT directory iterator helper (David Arcari) [RHEL-84464]
- tools/power turbostat: Extend PMT identification with a sequence number (David Arcari) [RHEL-84464]
- tools/power turbostat: Return default value for unmapped PMT domains (David Arcari) [RHEL-84464]
- tools/power turbostat: Check for non-zero value when MSR probing (David Arcari) [RHEL-84464]
- tools/power turbostat: Enhance turbostat self-performance visibility (David Arcari) [RHEL-84464]
- tools/power turbostat: Add fixed RAPL PSYS divisor for SPR (David Arcari) [RHEL-84464]
- tools/power turbostat: Fix PMT mmaped file size rounding (David Arcari) [RHEL-84464]
- tools/power turbostat: Remove SysWatt from DISABLED_BY_DEFAULT (David Arcari) [RHEL-84464]
- tools/power turbostat: Add an NMI column (David Arcari) [RHEL-84464]
- tools/power turbostat: add Busy%% to "show idle" (David Arcari) [RHEL-84464]
- tools/power turbostat: Introduce --force parameter (David Arcari) [RHEL-84464]
- tools/power turbostat: Improve --help output (David Arcari) [RHEL-84464]
- tools/power turbostat: Exit on unsupported Vendors (David Arcari) [RHEL-84464]
- tools/power turbostat: Exit on unsupported Intel models (David Arcari) [RHEL-84464]
- tools/power turbostat: update turbostat(8) (David Arcari) [RHEL-84464]
- tools/power turbostat: Add initial support for ClearwaterForest (David Arcari) [RHEL-45097 RHEL-84464]
- tools/power turbostat: Add initial support for PantherLake (David Arcari) [RHEL-47460 RHEL-84464]
- tools/power turbostat: 2024.11.30 (David Arcari) [RHEL-84464]
- tools/power turbostat: Add RAPL psys as a built-in counter (David Arcari) [RHEL-84464]
- tools/power turbostat: Fix child's argument forwarding (David Arcari) [RHEL-84464]
- tools/power turbostat: Force --no-perf in --dump mode (David Arcari) [RHEL-84464]
- tools/power turbostat: Add support for /sys/class/drm/card1 (David Arcari) [RHEL-84464]
- tools/power turbostat: Cache graphics sysfs file descriptors during probe (David Arcari) [RHEL-84464]
- tools/power turbostat: Consolidate graphics sysfs access (David Arcari) [RHEL-84464]
- tools/power turbostat: Remove unnecessary fflush() call (David Arcari) [RHEL-84464]
- tools/power turbostat: Enhance platform divergence description (David Arcari) [RHEL-84464]
- tools/power turbostat: Remove PC3 support on Lunarlake (David Arcari) [RHEL-84464]
- tools/power turbostat: Rename arl_features to lnl_features (David Arcari) [RHEL-84464]
- tools/power turbostat: Add back PC8 support on Arrowlake (David Arcari) [RHEL-84464]
- tools/power turbostat: Remove PC7/PC9 support on MTL (David Arcari) [RHEL-84464]
- tools/power turbostat: Honor --show CPU, even when even when num_cpus=1 (David Arcari) [RHEL-84464]
- tools/power turbostat: Fix trailing '\n' parsing (David Arcari) [RHEL-84464]
- tools/power turbostat: Allow using cpu device in perf counters on hybrid platforms (David Arcari) [RHEL-84464]
- tools/power turbostat: Fix column printing for PMT xtal_time counters (David Arcari) [RHEL-84464]
- tools/power turbostat: fix GCC9 build regression (David Arcari) [RHEL-84464]
- cgroup: Remove steal time from usage_usec (Waiman Long) [RHEL-79933]
- KVM: selftests: Allow running a single iteration of dirty_log_test (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Fix an off-by-one in the number of dirty_log_test iterations (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Set per-iteration variables at the start of each iteration (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Tighten checks around prev iter's last dirty page in ring (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Ensure guest writes min number of pages in dirty_log_test (Maxim Levitsky) [RHEL-67879]
- KVM: sefltests: Verify value of dirty_log_test last page isn't bogus (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Collect *all* dirty entries in each dirty_log_test iteration (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Print (previous) last_page on dirty page value mismatch (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Use continue to handle all "pass" scenarios in dirty_log_test (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Post to sem_vcpu_stop if and only if vcpu_stop is true (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Keep dirty_log_test vCPU in guest until it needs to stop (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Honor "stop" request in dirty ring test (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Limit dirty_log_test's s390x workaround to s390x (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Continuously reap dirty ring while vCPU is running (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Read per-page value into local var when verifying dirty_log_test (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Precisely track number of dirty/clear pages for each iteration (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Drop stale srandom() initialization from dirty_log_test (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Drop signal/kick from dirty ring testcase (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Sync dirty_log_test iteration to guest *before* resuming (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Support multiple write retires in dirty_log_test (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Add vcpu_arch_put_guest() to do writes from guest code (Maxim Levitsky) [RHEL-67879]
- KVM: selftests: Provide a global pseudo-RNG instance for all tests (Maxim Levitsky) [RHEL-67879]
- KVM: VMX: read the PML log in the same order as it was written (Maxim Levitsky) [RHEL-67879]
- KVM: VMX: refactor PML terminology (Maxim Levitsky) [RHEL-67879]
- arch/x86/kernel/setup.c: fix rh_check_supported (Tomas Henzl) [RHEL-71452]
- selftests/bpf: Add tests for bpf_get_dentry_xattr (Gregory Bell) [RHEL-33903]
- bpf: Add kfunc bpf_get_dentry_xattr() to read xattr from dentry (Gregory Bell) [RHEL-33903]
- bpf: Move bpf_get_file_xattr to fs/bpf_fs_kfuncs.c (Gregory Bell) [RHEL-33903]
- selftests/bpf: Attempt to build BPF programs with -Wsign-compare (Gregory Bell) [RHEL-33903]
- selftests/bpf: Fixes tests for filesystem kfuncs (Gregory Bell) [RHEL-33903]
- selftests/bpf: Fix spelling mistake "get_signaure_size" -> "get_signature_size" (Gregory Bell) [RHEL-33903]
- selftests/bpf: Add test that uses fsverity and xattr to sign a file (Gregory Bell) [RHEL-33903]
- selftests/bpf: Add tests for filesystem kfuncs (Gregory Bell) [RHEL-33903]
- selftests/bpf: Sort config in alphabetic order (Gregory Bell) [RHEL-33903]
- Documentation/bpf: Add documentation for filesystem kfuncs (Gregory Bell) [RHEL-33903]
- bpf, fsverity: Add kfunc bpf_get_fsverity_digest (Gregory Bell) [RHEL-33903]
- bpf: Add kfunc bpf_get_file_xattr (Gregory Bell) [RHEL-33903]
- mm: hugetlb: avoid fallback for specific node allocation of 1G pages (CKI Backport Bot) [RHEL-78971]
- Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (CKI Backport Bot) [RHEL-70421]
- can: raw: raw_getsockopt(): reduce scope of err (Radu Rendec) [RHEL-84144]
- can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS (Radu Rendec) [RHEL-84144]
- can: canxl: add virtual CAN network identifier support (Radu Rendec) [RHEL-84144]
- can: isotp: support dynamic flow control parameters (Radu Rendec) [RHEL-84144]
- can: bcm: add recvmsg flags for own, local and remote traffic (Radu Rendec) [RHEL-84144]
- can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior (Radu Rendec) [RHEL-84144]
- can: dev: add can_state_get_by_berr_counter() to return the CAN state based on the current error counters (Radu Rendec) [RHEL-84144]
- can: raw: Remove NULL check before dev_{put, hold} (Radu Rendec) [RHEL-84144]
- can: raw: add missing refcount for memory leak fix (Radu Rendec) [RHEL-84144]
- can: rx-offload: add can_rx_offload_get_echo_skb_queue_tail() (Radu Rendec) [RHEL-84144]
- can: rx-offload: rename rx_offload_get_echo_skb() -> can_rx_offload_get_echo_skb_queue_timestamp() (Radu Rendec) [RHEL-84144]
- can: raw: fix lockdep issue in raw_release() (Radu Rendec) [RHEL-84144]
- can: raw: fix receiver memory leak (Radu Rendec) [RHEL-84144]
- can: uapi: move CAN_RAW_FILTER_MAX definition to raw.h (Radu Rendec) [RHEL-84144]
- can: length: refactor frame lengths definition to add size in bits (Radu Rendec) [RHEL-84144]
- can: length: fix description of the RRS field (Radu Rendec) [RHEL-84144]
- can: length: fix bitstuffing count (Radu Rendec) [RHEL-84144]
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Radu Rendec) [RHEL-84144]
- can: j1939: change j1939_netdev_lock type to mutex (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Radu Rendec) [RHEL-84144]
- can: length: make header self contained (Radu Rendec) [RHEL-84144]
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Radu Rendec) [RHEL-84144]
- can: isotp: add module parameter for maximum pdu size (Radu Rendec) [RHEL-84144]
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Radu Rendec) [RHEL-84144]
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Radu Rendec) [RHEL-84144]
- can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Radu Rendec) [RHEL-84144]
- can: bittiming: can_calc_bittiming(): add missing parameter to no-op function (Radu Rendec) [RHEL-84144]
- can: raw: use temp variable instead of rolling back config (Radu Rendec) [RHEL-84144]
- can: j1939: do not wait 250 ms if the same addr was already claimed (Radu Rendec) [RHEL-84144]
- can: isotp: check CAN address family in isotp_bind() (Radu Rendec) [RHEL-84144]
- can: gw: give feedback on missing CGW_FLAGS_CAN_IIF_TX_OK flag (Radu Rendec) [RHEL-84144]
- can: raw: fix CAN FD frame transmissions over CAN XL devices (Radu Rendec) [RHEL-84144]
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Radu Rendec) [RHEL-84144]
- can: raw: add support for SO_MARK (Radu Rendec) [RHEL-84144]
- net: af_can: remove useless parameter 'err' in 'can_rx_register()' (Radu Rendec) [RHEL-84144]
- can: sja1000: fix size of OCR_MODE_MASK define (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_send_one(): fix missing CAN header initialization (Radu Rendec) [RHEL-84144]
- can: af_can: fix NULL pointer dereference in can_rx_register() (Radu Rendec) [RHEL-84144]
- can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_session_tx_eoma(): fix debug info (Radu Rendec) [RHEL-84144]
- can: add termination resistor documentation (Radu Rendec) [RHEL-84144]
- can: bcm: check the result of can_send() in bcm_can_tx() (Radu Rendec) [RHEL-84144]
- can: bcm: registration process optimization in bcm_module_init() (Radu Rendec) [RHEL-84144]
- can: raw: add CAN XL support (Radu Rendec) [RHEL-84144]
- can: raw: use guard clause to optimize nesting in raw_rcv() (Radu Rendec) [RHEL-84144]
- can: raw: process optimization in raw_init() (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_session_destroy(): fix memory leak of skbs (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (Radu Rendec) [RHEL-84144]
- can: error: add definitions for the different CAN error thresholds (Radu Rendec) [RHEL-84144]
- can: error: specify the values of data[5..7] of CAN error frames (Radu Rendec) [RHEL-84144]
- can: bcm: use call_rcu() instead of costly synchronize_rcu() (Radu Rendec) [RHEL-84144]
- can: Break loopback loop on loopback documentation (Radu Rendec) [RHEL-84144]
- can: raw: add support for SO_TXTIME/SCM_TXTIME (Radu Rendec) [RHEL-84144]
- can: raw: raw_sendmsg(): remove not needed setting of skb->sk (Radu Rendec) [RHEL-84144]
- can: gw: use call_rcu() instead of costly synchronize_rcu() (Radu Rendec) [RHEL-84144]
- can: isotp: convert struct tpcon::{idx,len} to unsigned int (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_can_recv(): ignore messages with invalid source address (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Radu Rendec) [RHEL-84144]
- can: bcm: Use hrtimer_forward_now() (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (Radu Rendec) [RHEL-84144]
- can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Radu Rendec) [RHEL-84144]
- can: j1939: extend UAPI to notify about RX status (Radu Rendec) [RHEL-84144]
- can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_session_tx_dat(): fix typo (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_xtp_rx_dat_one(): use separate pointer for session skb control buffer (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_session_tx_dat(): use consistent name se_skcb for session skb control buffer (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_session_completed(): use consistent name se_skb for the session skb (Radu Rendec) [RHEL-84144]
- can: j1939: replace fall through comment by fallthrough pseudo-keyword (Radu Rendec) [RHEL-84144]
- can: j1939: fix checkpatch warnings (Radu Rendec) [RHEL-84144]
- can: j1939: j1939_sk_sock_destruct(): correct a grammatical error (Radu Rendec) [RHEL-84144]

* Mon Mar 24 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-575.el9]
- PCI/bwctrl: Fix NULL pointer deref on unbind and bind (Myron Stowe) [RHEL-81906]
- PCI/bwctrl: Enable only if more than one speed is supported (Myron Stowe) [RHEL-81906]
- PCI: Honor Max Link Speed when determining supported speeds (Myron Stowe) [RHEL-81906]
- PCI: Drop duplicate pcie_get_speed_cap(), pcie_get_width_cap() declarations (Myron Stowe) [RHEL-81906]
- PCI/bwctrl: Add pcie_set_target_speed() to set PCIe Link Speed (Myron Stowe) [RHEL-81906]
- PCI/bwctrl: Re-add BW notification portdrv as PCIe BW controller (Myron Stowe) [RHEL-81906]
- PCI: Abstract LBMS seen check into pcie_lbms_seen() (Myron Stowe) [RHEL-81906]
- PCI: Refactor pcie_update_link_speed() (Myron Stowe) [RHEL-81906]
- PCI: Store all PCIe Supported Link Speeds (Myron Stowe) [RHEL-81906]
- PCI: Protect Link Control 2 Register with RMW locking (Myron Stowe) [RHEL-81906]
- Documentation PCI: Reformat RMW ops documentation (Myron Stowe) [RHEL-81906]
- thermal/of: Fix cdev lookup in thermal_of_should_bind() (David Arcari) [RHEL-79821]
- thermal: of: Simplify thermal_of_should_bind with scoped for each OF child (David Arcari) [RHEL-79821]
- thermal: intel: Fix compile issue when CONFIG_NET is not defined (David Arcari) [RHEL-79821]
- thermal: intel: int340x: Panther Lake power floor and workload hint support (David Arcari) [RHEL-79821]
- thermal: intel: int340x: Panther Lake DLVR support (David Arcari) [RHEL-79821]
- thermal: intel: Remove explicit user_space governor selection (David Arcari) [RHEL-79821]
- ACPI: DPTF: Support Panther Lake (David Arcari) [RHEL-79821]
- thermal: intel: int340x: processor: Enable MMIO RAPL for Panther Lake (David Arcari) [RHEL-79821]
- thermal: int3400: Remove unneeded data_vault attribute_group (David Arcari) [RHEL-79821]
- thermal: int3400: Fix reading of current_uuid for active policy (David Arcari) [RHEL-79821]
- x86/cpu: Fix FAM5_QUARK_X1000 to use X86_MATCH_VFM() (David Arcari) [RHEL-79821]
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support (David Arcari) [RHEL-79821]
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support (David Arcari) [RHEL-79821]
- finally take no_llseek out [partial] (David Arcari) [RHEL-79821]
- thermal: intel: intel_tcc_cooling: Switch to new Intel CPU model defines (David Arcari) [RHEL-79821]
- thermal: intel: intel_pch: Improve cooling log (David Arcari) [RHEL-79821]
- x86/cpu/topology: Remove topology_max_die_per_package() (David Arcari) [RHEL-79821]
- x86/cpu/topology: Rename topology_max_die_per_package() [partial] (David Arcari) [RHEL-79821]
- arch/powerpc/perf: Update get_mem_data_src function to use saved values of sier and mmcra regs (Mamatha Inamdar) [RHEL-80602]
- arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Mamatha Inamdar) [RHEL-80602]
- certs: Add ECDSA signature verification self-test (Herbert Xu) [RHEL-81929]
- certs: Move RSA self-test data to separate file (Herbert Xu) [RHEL-81929]
- certs: Break circular dependency when selftest is modular (Herbert Xu) [RHEL-81929]
- KEYS: Include linux/errno.h in linux/verification.h (Herbert Xu) [RHEL-81929]
- crypto: certs: fix FIPS selftest dependency (Herbert Xu) [RHEL-81929]
- certs: Add support for using elliptic curve keys for signing modules (Herbert Xu) [RHEL-81929]
- certs: Trigger creation of RSA module signing key if it's not an RSA key (Herbert Xu) [RHEL-81929]
- dpll: add clock quality level attribute and op (Petr Oros) [RHEL-77838]
- tpm: Change to kvalloc() in eventlog/acpi.c (CKI Backport Bot) [RHEL-81489] {CVE-2024-58005}
- selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation (Rafael Aquini) [RHEL-74363]
- vrf: use RCU protection in l3mdev_l3_out() (Guillaume Nault) [RHEL-81542] {CVE-2025-21791}
- smb: client: fix regression with guest option (Paulo Alcantara) [RHEL-83858]

* Thu Mar 20 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-574.el9]
- ima: Fix a potential integer overflow in ima_appraise_measurement (CKI Backport Bot) [RHEL-80802] {CVE-2022-49643}
- selftests/mm: hugetlb_fault_after_madv: improve test output (David Hildenbrand) [RHEL-60023]
- selftests/mm: hugetlb_fault_after_madv: use default hugetlb page size (David Hildenbrand) [RHEL-60023]
- Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CKI Backport Bot) [RHEL-81375] {CVE-2024-57988}
- list: fix a data-race around ep->rdllist (Jan Stancek) [RHEL-80985] {CVE-2022-49443}
- Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CKI Backport Bot) [RHEL-81268] {CVE-2024-57987}
- RDMA/nldev: Set error code in rdma_nl_notify_event (Kamal Heib) [RHEL-77880]
- RDMA/core: Fix ENODEV error for iWARP test over vlan (Kamal Heib) [RHEL-77880]
- IB/cm: Rework sending DREQ when destroying a cm_id (Kamal Heib) [RHEL-77880]
- IB/cm: Do not hold reference on cm_id unless needed (Kamal Heib) [RHEL-77880]
- IB/cm: Explicitly mark if a response MAD is a retransmission (Kamal Heib) [RHEL-77880]
- RDMA/nldev: Add IB device and net device rename events (Kamal Heib) [RHEL-77880]
- RDMA/core: Move ib_uverbs_file struct to uverbs_types.h (Kamal Heib) [RHEL-77880]
- RDMA/core: Add device ufile cleanup operation (Kamal Heib) [RHEL-77880]
- RDMA: Use ethtool string helpers (Kamal Heib) [RHEL-77880]
- RDMA/ipoib: Use the networking stack default for txqueuelen (Kamal Heib) [RHEL-77880]
- RDMA/srpt: Make slab cache names unique (Kamal Heib) [RHEL-77880]
- efi: Add iMac Pro 2017 to uefi skip cert quirk (Coiby Xu) [RHEL-80989]
- efi: Correct Macmini DMI match in uefi cert quirk (Coiby Xu) [RHEL-80989]
- efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CKI Backport Bot) [RHEL-80989] {CVE-2022-49357}
- NFSD: fix hang in nfsd4_shutdown_callback (Olga Kornievskaia) [RHEL-81291] {CVE-2025-21795}
- ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CKI Backport Bot) [RHEL-81439] {CVE-2024-58012}
- netfilter: nf_tables: reject mismatching sum of field_len with set key length (CKI Backport Bot) [RHEL-82489] {CVE-2025-21826}
- usbnet: fix memory leak in error case (CKI Backport Bot) [RHEL-80848] {CVE-2022-49657}
- crypto: tegra - do not transfer req when tegra init fails (CKI Backport Bot) [RHEL-82476] {CVE-2024-58075}
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (Aristeu Rozanski) [RHEL-22697]
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (Aristeu Rozanski) [RHEL-22697]
- RAS/AMD/ATL: Validate address map when information is gathered (Aristeu Rozanski) [RHEL-22697]
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (Aristeu Rozanski) [RHEL-22697]
- RAS/AMD/ATL: Read DRAM hole base early (Aristeu Rozanski) [RHEL-22697]
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (Aristeu Rozanski) [RHEL-22697]
- configs: enable IVPU driver on RHEL (Karol Herbst) [RHEL-38583]
- accel: add build system changes (Karol Herbst) [RHEL-38583]
- accel: backport ivpu driver from v6.12 (Karol Herbst) [RHEL-38583]

* Mon Mar 17 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-573.el9]
- rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-79818]
- Revert "mm: add vma_has_recency()" (Luiz Capitulino) [RHEL-80655]
- Revert "mm: support POSIX_FADV_NOREUSE" (Luiz Capitulino) [RHEL-80655]
- phy: tegra: xusb: reset VBUS & ID OVERRIDE (Rupinderjit Singh) [RHEL-80628]
- smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80527 RHEL-78507]
- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21980] {CVE-2024-57807}
- scsi: core: Fix command pass through retry regression (Ewan D. Milne) [RHEL-77122]
- fs/proc: fix softlockup in __read_vmcore (part 2) (Baoquan He) [RHEL-79112] {CVE-2025-21694}
- RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-49958 RHEL-6641 RHEL-77115]
- CVE-2025-1272: security: Re-enable lockdown LSM in some setup_arch() (Lenny Szubowicz) [RHEL-78974] {CVE-2025-1272}
- redhat/self-test: Remove --all from git query (Prarit Bhargava)
- redhat: fix selftest git command so it picks the right commit (Patrick Talbert)
- arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71914]
- Documentation/powerpc/fadump: add additional parameter feature details (Mamatha Inamdar) [RHEL-74219]
- powerpc: increase MIN RMA size for CAS negotiation (Mamatha Inamdar) [RHEL-74219]
- powerpc/fadump: fix additional param memory reservation for HASH MMU (Mamatha Inamdar) [RHEL-74219]
- powerpc: export MIN RMA size (Mamatha Inamdar) [RHEL-74219]
- cxgb4: use port number to set mac addr (Michal Schmidt) [RHEL-75514]
- pps: Fix a use-after-free (Michal Schmidt) [RHEL-9309]
- gitlab-ci: add jobs for rhel9 automotive pipelines (Michael Hofmann)
- gitlab-ci: clean up trigger job naming and template inheritance (Michael Hofmann)
- can: bcm: Fix UAF in bcm_proc_show() (Michal Schmidt) [RHEL-80748] {CVE-2023-52922}
- Revert "x86/kvm: Override default caching mode for SEV-SNP and TDX" (Vitaly Kuznetsov) [RHEL-75512]
- idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-68688]
- scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78429]
- scsi: sg: Fix slab-use-after-free read in sg_release() (Ewan D. Milne) [RHEL-75864] {CVE-2024-56631}
- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (Aristeu Rozanski) [RHEL-22695]
- ACPI: PRM: Add PRM handler direct call support (Aristeu Rozanski) [RHEL-22695]
- efi/runtime-wrappers: Clean up white space and add __init annotation (Aristeu Rozanski) [RHEL-22695]
- acpi/prmt: Use EFI runtime sandbox to invoke PRM handlers (Aristeu Rozanski) [RHEL-22695]
- efi/runtime-wrappers: Don't duplicate setup/teardown code (Aristeu Rozanski) [RHEL-22695]
- efi/runtime-wrapper: Move workqueue manipulation out of line (Aristeu Rozanski) [RHEL-22695]
- efi/runtime-wrappers: Use type safe encapsulation of call arguments (Aristeu Rozanski) [RHEL-22695]
- scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-82537]
- tcp: fix excessive TLP and RACK timeouts from HZ rounding (CKI Backport Bot) [RHEL-83546]
- pm: cpupower: Add missing residency header changes in cpuidle.h to SWIG (David Arcari) [RHEL-80660]
- pm: cpupower: Add header changes for cpufreq.h to SWIG bindings (David Arcari) [RHEL-80660]
- pm: cpupower: Add install and uninstall options to bindings makefile (David Arcari) [RHEL-80660]
- cpupower: Adjust whitespace for amd-pstate specific prints (David Arcari) [RHEL-80660]
- cpupower: Don't fetch maximum latency when EPP is enabled (David Arcari) [RHEL-80660]
- cpupower: Add support for showing energy performance preference (David Arcari) [RHEL-80660]
- cpupower: Don't try to read frequency from hardware when kernel uses aperfmperf (David Arcari) [RHEL-80660]
- cpupower: Add support for amd-pstate preferred core rankings (David Arcari) [RHEL-80660]
- cpupower: Add support for parsing 'enabled' or 'disabled' strings from table (David Arcari) [RHEL-80660]
- cpupower: Remove spurious return statement (David Arcari) [RHEL-80660]
- cpupower: fix TSC MHz calculation (David Arcari) [RHEL-80660]
- cpupower: revise is_valid flag handling for idle_monitor (David Arcari) [RHEL-80660]
- pm: cpupower: Makefile: Fix cross compilation (David Arcari) [RHEL-80660]
- cpupower: add checks for xgettext and msgfmt (David Arcari) [RHEL-80660]
- cpupower: Add Chinese Simplified translation (David Arcari) [RHEL-80660]
- pm: cpupower: bindings: Add test to confirm cpu state is disabled (David Arcari) [RHEL-80660]
- pm: cpupower: bindings: Improve disable c_state block (David Arcari) [RHEL-80660]
- pm: cpupower: gitignore: Add compile_commands.json (David Arcari) [RHEL-80660]
- pm: cpupower: Makefile: Allow overriding cross-compiling env params (David Arcari) [RHEL-80660]
- pm: cpupower: bench: print config file path when open cpufreq-bench.conf fails (David Arcari) [RHEL-80660]
- tools/power/cpupower: Add documentation for some recently introduced options (David Arcari) [RHEL-80660]
- pm: cpupower: Clean up bindings gitignore (David Arcari) [RHEL-80660]
- pm: cpupower: rename raw_pylibcpupower.i (David Arcari) [RHEL-80660]
- pm:cpupower: Add error warning when SWIG is not installed (David Arcari) [RHEL-80660]
- pm:cpupower: Include test_raw_pylibcpupower.py (David Arcari) [RHEL-80660]
- pm:cpupower: Add SWIG bindings files for libcpupower (David Arcari) [RHEL-80660]
- pm:cpupower: Add missing powercap_set_enabled() stub function (David Arcari) [RHEL-80660]
- cpupower: fix lib default installation path (David Arcari) [RHEL-80660]
- cpupower: Disable direct build of the 'bench' subproject (David Arcari) [RHEL-80660]
- cpupower: Remove absent 'v' parameter from monitor man page (David Arcari) [RHEL-80660]
- cpupower: Improve cpupower build process description (David Arcari) [RHEL-80660]
- cpupower: Add 'help' target to the main Makefile (David Arcari) [RHEL-80660]
- cpupower: Replace a dead reference link with working ones (David Arcari) [RHEL-80660]
- Fix cpupower-frequency-info.1 man page typo (David Arcari) [RHEL-80660]
- tools cpupower bench: Override CFLAGS assignments (David Arcari) [RHEL-80660]
- cpupower: fix reference to nonexistent document (David Arcari) [RHEL-80660]
- EDAC/amd64: Simplify ECC check on unified memory controllers (Aristeu Rozanski) [RHEL-73049]
- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (Myron Stowe) [RHEL-47438]
- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (Myron Stowe) [RHEL-47438]
- can: isotp: fix support for transmission of SF without flow control (Radu Rendec) [RHEL-80832]
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (Radu Rendec) [RHEL-80832]
- can: isotp: restore accidentally removed MSG_PEEK feature (Radu Rendec) [RHEL-80832]
- can: isotp: fix race between isotp_sendsmg() and isotp_release() (Radu Rendec) [RHEL-80832]
- can: isotp: handle wait_event_interruptible() return values (Radu Rendec) [RHEL-80832]
- can: isotp: split tx timer into transmission and timeout (Radu Rendec) [RHEL-80832]
- can: isotp: fix potential CAN frame reception race in isotp_rcv() (Radu Rendec) [RHEL-80832]
- can: isotp: fix tx state handling for echo tx processing (Radu Rendec) [RHEL-80832]
- can: isotp: isotp_bind(): do not validate unused address information (Radu Rendec) [RHEL-80832]
- can: isotp: add support for transmission without flow control (Radu Rendec) [RHEL-80832]
- can: isotp: remove re-binding of bound socket (Radu Rendec) [RHEL-80832]
- can: isotp: stop timeout monitoring when no first frame was sent (Radu Rendec) [RHEL-80832]
- can: isotp: support MSG_TRUNC flag when reading from socket (Radu Rendec) [RHEL-80832]
- can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Radu Rendec) [RHEL-80832]
- can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting (Radu Rendec) [RHEL-80832]
- can: isotp: sanitize CAN ID checks in isotp_bind() (Radu Rendec) [RHEL-80832] {CVE-2022-49269}
- can: isotp: set max PDU size to 64 kByte (Radu Rendec) [RHEL-80832]
- can: isotp: set default value for N_As to 50 micro seconds (Radu Rendec) [RHEL-80832]
- can: isotp: add local echo tx processing for consecutive frames (Radu Rendec) [RHEL-80832]
- selftests: livepatch: test livepatching a kprobed function (Denis Aleksandrov) [RHEL-80215]
- selftests: livepatch: save and restore kprobe state (Denis Aleksandrov) [RHEL-80215]
- selftests: livepatch: rename KLP_SYSFS_DIR to SYSFS_KLP_DIR (Denis Aleksandrov) [RHEL-80215]
- Documentation: livepatch: Correct release locks antonym (Denis Aleksandrov) [RHEL-80215]
- EDAC/mce_amd: Add support for FRU text in MCA (Aristeu Rozanski) [RHEL-52657]
- x86/mce/apei: Handle variable SMCA BERT record size (Aristeu Rozanski) [RHEL-52657]
- x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Aristeu Rozanski) [RHEL-52657]
- tracing: Add __print_dynamic_array() helper (Aristeu Rozanski) [RHEL-52657]
- x86/mce: Add wrapper for struct mce to export vendor specific info (Aristeu Rozanski) [RHEL-52657]
- x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() (Aristeu Rozanski) [RHEL-52657]
- x86/mce: Define mce_prep_record() helpers for common and per-CPU fields (Aristeu Rozanski) [RHEL-52657]
- x86/mce: Rename mce_setup() to mce_prep_record() (Aristeu Rozanski) [RHEL-52657]
- workqueue: Put the pwq after detaching the rescuer from the pool (CKI Backport Bot) [RHEL-81472] {CVE-2025-21786}
- EDAC/{i10nm,skx,skx_common}: Support UV systems (Aristeu Rozanski) [RHEL-73892]
- x86/xen: add FRAME_END to xen_hypercall_hvm() (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/xen: fix xen_hypercall_hvm() to not clobber %%rbx (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/asm: Make serialize() always_inline (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/static-call: fix 32-bit build (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/xen: add central hypercall functions (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/xen: don't do PV iret hypercall through hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/static-call: provide a way to do very early static-call updates (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- objtool/x86: allow syscall instruction (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86: make get_cpu_vendor() accessible from Xen code (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
- x86/xen: Avoid relocatable quantities in Xen ELF notes (Vitaly Kuznetsov) [RHEL-70669]
- tracing: Fix bad hist from corrupting named_triggers list (Tomas Glozar) [RHEL-81911]
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Tomas Glozar) [RHEL-81911]
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (Tomas Glozar) [RHEL-81911]
- Documentation/sysctl: Add timer_migration to kernel.rst (Phil Auld) [RHEL-11707]
- netfilter: nfnetlink_queue: drop bogus WARN_ON (Florian Westphal) [RHEL-80104]

* Wed Mar 12 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-572.el9]
- sched: Don't define sched_clock_irqtime as static key (Phil Auld) [RHEL-78821]
- sched/fair: Do not compute overloaded status unnecessarily during lb (Phil Auld) [RHEL-78821]
- sched/fair: Do not compute NUMA Balancing stats unnecessarily during lb (Phil Auld) [RHEL-78821]
- sched, psi: Don't account irq time if sched_clock_irqtime is disabled (Phil Auld) [RHEL-78821]
- sched: Don't account irq time if sched_clock_irqtime is disabled (Phil Auld) [RHEL-78821]
- sched: Define sched_clock_irqtime as static key (Phil Auld) [RHEL-78821]
- sched/debug: Change need_resched warnings to pr_err (Phil Auld) [RHEL-78821]
- sched: Fix race between yield_to() and try_to_wake_up() (Phil Auld) [RHEL-78821]
- topology: Keep the cpumask unchanged when printing cpumap (Phil Auld) [RHEL-78821]
- sched/fair: Update comments after sched_tick() rename. (Phil Auld) [RHEL-78821]
- cpufreq: schedutil: Fix superfluous updates caused by need_freq_update (Phil Auld) [RHEL-78821]
- sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-78821]
- sched: deadline: Cleanup goto label in pick_earliest_pushable_dl_task (Phil Auld) [RHEL-78821]
- sched/fair: Mark m*_vruntime() with __maybe_unused (Phil Auld) [RHEL-78821]
- sched: Unify HK_TYPE_{TIMER|TICK|MISC} to HK_TYPE_KERNEL_NOISE (Phil Auld) [RHEL-78821]
- sched/isolation: Consolidate housekeeping cpumasks that are always identical (Phil Auld) [RHEL-78821]
- sched/isolation: Make "isolcpus=nohz" equivalent to "nohz_full" (Phil Auld) [RHEL-78821]
- sched/core: Remove HK_TYPE_SCHED (Phil Auld) [RHEL-78821]
- sched/deadline: Consolidate Timer Cancellation (Phil Auld) [RHEL-78821]
- sched/fair: Remove CONFIG_CFS_BANDWIDTH=n definition of cfs_bandwidth_used() (Phil Auld) [RHEL-78821]
- sched: Don't try to catch up excess steal time. (Phil Auld) [RHEL-78821]
- sched: add READ_ONCE to task_on_rq_queued (Phil Auld) [RHEL-78821]
- sched/cpufreq: Ensure sd is rebuilt for EAS check (Phil Auld) [RHEL-78821]
- sched: Initialize idle tasks only once (Phil Auld) [RHEL-78821]
- sched/uclamp: Fix unnused variable warning (Phil Auld) [RHEL-78821]
- sched_getattr: port to copy_struct_to_user (Phil Auld) [RHEL-78821]
- uaccess: add copy_struct_to_user helper (Phil Auld) [RHEL-78821]
- sched: Consolidate pick_*_task to task_is_pushable helper (Phil Auld) [RHEL-78821]
- sched: Add move_queued_task_locked helper (Phil Auld) [RHEL-78821]
- sched: idle: Optimize the generic idle loop by removing needless memory barrier (Phil Auld) [RHEL-78821]
- sched/wait: Remove unused bit_wait_io_timeout (Phil Auld) [RHEL-78821]
- sched/deadline: Fix schedstats vs deadline servers (Phil Auld) [RHEL-78821]
- timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Phil Auld) [RHEL-78821]
- sched/deadline: Comment sched_dl_entity::dl_server variable (Phil Auld) [RHEL-78821]
- sched/core: Add clearing of ->dl_server in put_prev_task_balance() (Phil Auld) [RHEL-78821]
- sched/core: Clear prev->dl_server in CFS pick fast path (Phil Auld) [RHEL-78821]
- sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy (Phil Auld) [RHEL-78821]
- sched: remove HZ_BW feature hedge (Phil Auld) [RHEL-78821]
- lib: bitmap: fix many kernel-doc warnings (Phil Auld) [RHEL-78821]
- docs/scheduler: fix typo and warning in sched-bwc (Phil Auld) [RHEL-78821]
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-81666] {CVE-2025-21785}
- irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Charles Mirabile) [RHEL-62922]
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Fix irq_complete_ack() comment (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Rely on genpool alignment (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Force propagation of the active state with a read-back (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v4.1: Replace bare number with ID_AA64PFR0_EL1_GIC_V4P1 (Charles Mirabile) [RHEL-62922]
- irqchip: Remove asmlinkage for handlers registered with set_handle_irq() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Pass #redistributor-regions to gic_of_setup_kvm_info() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v4: Always configure affinity on VPE activation (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Enable non-coherent redistributors/ITSes ACPI probing (Charles Mirabile) [RHEL-62922]
- ACPICA: MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Fix 'broken_rdists' unused warning when !SMP and !ACPI (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Add support for ACPI's disabled but 'online capable' CPUs (Charles Mirabile) [RHEL-62922]
- ACPICA: MADT: Add GICC online capable bit handling (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Don't return errors from gic_acpi_match_gicc() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Work around insecure GIC integrations (Charles Mirabile) [RHEL-62922]
- arm64: irqchip/gic-v3: Select priorities at boot time (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Init SRE before poking sysregs (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Detect GICD_CTRL.DS and SCR_EL3.FIQ earlier (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Make distributor priorities variables (Charles Mirabile) [RHEL-62922]
- irqchip/gic-common: Remove sync_access callback (Charles Mirabile) [RHEL-62922]
- wordpart.h: Add REPEAT_BYTE_U32() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Remove usage of the deprecated ida_simple_xx() API (Charles Mirabile) [RHEL-62922]
- irqchip/gic(v3): Replace gic_irq() with irqd_to_hwirq() (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Use readl_relaxed_poll_timeout_atomic() (Charles Mirabile) [RHEL-62922]
- iopoll: Do not use timekeeping in read_poll_timeout_atomic() (Charles Mirabile) [RHEL-62922]
- iopoll: Call cpu_relax() in busy loops (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Make gic_irq_domain_select() robust for zero parameter count (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Do not assume vPE tables are preallocated (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Flush ITS tables correctly in non-coherent GIC designs (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Handle non-coherent GICv4 redistributors (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3: Enable non-coherent redistributors/ITSes DT probing (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Don't override quirk settings with default values (Charles Mirabile) [RHEL-62922]
- irqchip/gic-v3-its: Split allocation from initialisation of its_node (Charles Mirabile) [RHEL-62922]
- block: Add common atomic writes enable flag (Nigel Croxon) [RHEL-73514]
- block: Ensure start sector is aligned for stacking atomic writes (Nigel Croxon) [RHEL-73514]
- block: Support atomic writes limits for stacked devices (Nigel Croxon) [RHEL-73514]
- md/raid*: Fix the set_queue_limits implementations (Nigel Croxon) [RHEL-73514]
- md: Fix linear_set_limits() (Nigel Croxon) [RHEL-73514]
- md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Nigel Croxon) [RHEL-73514]
- md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-73514]
- md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-73514]
- md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-73514]
- md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-73514]
- md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-73514]
- md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-73514]
- md: Replace deprecated kmap_atomic() with kmap_local_page() (Nigel Croxon) [RHEL-73514]
- md/raid10: Atomic write support (Nigel Croxon) [RHEL-73514]
- md/raid1: Atomic write support (Nigel Croxon) [RHEL-73514]
- md/raid0: Atomic write support (Nigel Croxon) [RHEL-73514]
- md/raid5: Increase r5conf.cache_name size (Nigel Croxon) [RHEL-73514]
- md/raid10: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
- md/raid1: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
- md/raid0: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
- md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-73514]
- md/md-bitmap: Add missing destroy_work_on_stack() (Nigel Croxon) [RHEL-73514]
- md/raid5: don't set Faulty rdev for blocked_rdev (Nigel Croxon) [RHEL-73514]
- md/raid10: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73514]
- md/raid1: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73514]
- md/raid1: factor out helper to handle blocked rdev from raid1_write_request() (Nigel Croxon) [RHEL-73514]
- md: don't record new badblocks for faulty rdev (Nigel Croxon) [RHEL-73514]
- md: don't wait faulty rdev in md_wait_for_blocked_rdev() (Nigel Croxon) [RHEL-73514]
- md: add a new helper rdev_blocked() (Nigel Croxon) [RHEL-73514]
- md/raid5-ppl: Use atomic64_inc_return() in ppl_new_iounit() (Nigel Croxon) [RHEL-73514]
- md: ensure child flush IO does not affect origin bio->bi_status (Nigel Croxon) [RHEL-73514]
- mm/mm_init: use node's number of cpus in deferred_page_init_max_threads (Eric Chanudet) [RHEL-77271]
- selftests/net: convert test_vxlan_mdb.sh to run it in unique namespace (CKI Backport Bot) [RHEL-77173]
- powerpc/xive/spapr: correct bitmap allocation size (Mamatha Inamdar) [RHEL-80803] {CVE-2022-49623}
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-80098]
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (Maxim Levitsky) [RHEL-80098]
- RDMA/mana_ib: use the correct page table index based on hardware page size (Maxim Levitsky) [RHEL-80098]
- net: mana: Cleanup "mana" debugfs dir after cleanup of all children (Maxim Levitsky) [RHEL-80098]
- net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-80098]
- net: mana: Fix memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-80098]
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (Maxim Levitsky) [RHEL-80098]
- net: mana: use ethtool string helpers (Maxim Levitsky) [RHEL-80098]
- net: mana: Enable debugfs files for MANA device (Maxim Levitsky) [RHEL-80098]
- net: mana: Add get_link and get_link_ksettings in ethtool (Maxim Levitsky) [RHEL-80098]
- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (Maxim Levitsky) [RHEL-80098]
- net: mana: Improve mana_set_channels() in low mem conditions (Maxim Levitsky) [RHEL-80098]
- net: mana: Implement get_ringparam/set_ringparam for mana (Maxim Levitsky) [RHEL-80098]
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (Maxim Levitsky) [RHEL-80098]
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Maxim Levitsky) [RHEL-80098]
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Maxim Levitsky) [RHEL-80098]
- net: mana: Fix RX buf alloc_size alignment and atomic op panic (Maxim Levitsky) [RHEL-80098]
- s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81935]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81935]
- s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81935]
- io_uring: check if iowq is killed before queuing (Jeff Moyer) [RHEL-72430] {CVE-2024-56709}
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jeff Moyer) [RHEL-68164] {CVE-2024-53052}
- io_uring: check if we need to reschedule during overflow flush (Jeff Moyer) [RHEL-63824] {CVE-2024-50060}
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Herbert Xu) [RHEL-78983] {CVE-2024-56690}
- soc: qcom: cmd-db: Map shared memory as WC, not WB (CKI Backport Bot) [RHEL-58876] {CVE-2024-46689}

* Thu Mar 06 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-571.el9]
- KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Eric Auger) [RHEL-68997]
- PCI: qcom: Update ICC and OPP values after Link Up event (Myron Stowe) [RHEL-67693]
- PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() (Myron Stowe) [RHEL-67693]
- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (Myron Stowe) [RHEL-67693]
- PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: mediatek-gen3: Allow exact number of clocks only (Myron Stowe) [RHEL-67693]
- PCI: Fix pci_enable_acs() support for the ACS quirks (Myron Stowe) [RHEL-67693]
- PCI: Hold rescan lock while adding devices during host probe (Myron Stowe) [RHEL-67693]
- tools: PCI: Remove unused BILLION macro (Myron Stowe) [RHEL-67693]
- tools: PCI: Remove .*.cmd files with make clean (Myron Stowe) [RHEL-67693]
- PCI: Fix typos (Myron Stowe) [RHEL-67693]
- PCI/VPD: Remove pci_vpd_release() unused declarations (Myron Stowe) [RHEL-67693]
- PCI/PM: Remove __pci_pme_wakeup() unused declarations (Myron Stowe) [RHEL-67693]
- PCI: Make pci_bus_type constant (Myron Stowe) [RHEL-67693]
- x86/PCI: Check pcie_find_root_port() return for NULL (Myron Stowe) [RHEL-67693]
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (Myron Stowe) [RHEL-67693]
- PCI: Add ACS quirk for Qualcomm SA8775P (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: xilinx-xdma: Add schemas for Xilinx QDMA PCIe Root Port Bridge (Myron Stowe) [RHEL-67693]
- arm64: zynqmp: Add PCIe phys property for ZCU102 (Myron Stowe) [RHEL-67693]
- PCI: xilinx-nwl: Add PHY support (Myron Stowe) [RHEL-67693]
- dt-bindings: pci: xilinx-nwl: Add phys property (Myron Stowe) [RHEL-67693]
- PCI: xilinx-nwl: Clean up clock on probe failure/removal (Myron Stowe) [RHEL-67693]
- PCI: xilinx-nwl: Rate-limit misc interrupt messages (Myron Stowe) [RHEL-67693]
- PCI: xilinx-nwl: Fix register misspelling (Myron Stowe) [RHEL-67693]
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (Myron Stowe) [RHEL-67693]
- PCI: vmd: Fix indentation issue in vmd_shutdown() (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: rcar-gen4-pci-ep: Add R-Car V4M compatible (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: rcar-gen4-pci-host: Add R-Car V4M compatible (Myron Stowe) [RHEL-67693]
- PCI: rcar-gen4: Make read-only const array check_addr static (Myron Stowe) [RHEL-67693]
- PCI: Pass domain number to pci_bus_release_domain_nr() explicitly (Myron Stowe) [RHEL-67693]
- PCI: qcom: Add RX lane margining settings for 16.0 GT/s (Myron Stowe) [RHEL-67693]
- PCI: qcom: Add equalization settings for 16.0 GT/s (Myron Stowe) [RHEL-67693]
- PCI: dwc: Always cache the maximum link speed value in dw_pcie::max_link_speed (Myron Stowe) [RHEL-67693]
- PCI: qcom-ep: Enable controller resources like PHY only after refclk is available (Myron Stowe) [RHEL-67693]
- PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region (Myron Stowe) [RHEL-67693]
- PCI: qcom: Enumerate endpoints based on Link up event in 'global_irq' interrupt (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: qcom,pcie-sm8450: Add 'global' interrupt (Myron Stowe) [RHEL-67693]
- PCI: qcom-ep: Modify 'global_irq' and 'perst_irq' IRQ device names (Myron Stowe) [RHEL-67693]
- PCI: endpoint: Assign PCI domain number for endpoint controllers (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: pci-ep: Document 'linux,pci-domain' property (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: pci-ep: Update Maintainers (Myron Stowe) [RHEL-67693]
- PCI: qcom-ep: Reword the error message for receiving unknown global IRQ event (Myron Stowe) [RHEL-67693]
- PCI: qcom-ep: Drop the redundant masking of global IRQ events (Myron Stowe) [RHEL-67693]
- PCI: mediatek-gen3: Add Airoha EN7581 support (Myron Stowe) [RHEL-67693]
- PCI: mediatek-gen3: Rely on reset_bulk APIs for PHY reset lines (Myron Stowe) [RHEL-67693]
- PCI: mediatek-gen3: Add mtk_gen3_pcie_pdata data structure (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: mediatek-gen3: Add support for Airoha EN7581 (Myron Stowe) [RHEL-67693]
- PCI: mediatek: Drop excess mtk_pcie.mem kerneldoc description (Myron Stowe) [RHEL-67693]
- PCI/ACPI: Increase Loongson max PCI hosts to 8 (Myron Stowe) [RHEL-67693]
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() (Myron Stowe) [RHEL-67693]
- PCI: j721e: Add suspend and resume support (Myron Stowe) [RHEL-67693]
- PCI: j721e: Use T_PERST_CLK_US macro (Myron Stowe) [RHEL-67693]
- PCI: Add T_PERST_CLK_US macro (Myron Stowe) [RHEL-67693]
- PCI: j721e: Add reset GPIO to struct j721e_pcie (Myron Stowe) [RHEL-67693]
- PCI: j721e: Use dev_err_probe() in the probe() function (Myron Stowe) [RHEL-67693]
- PCI: cadence: Set cdns_pcie_host_init() global (Myron Stowe) [RHEL-67693]
- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (Myron Stowe) [RHEL-67693]
- PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: ti,j721e-pci-host: Add ACSPCIE proxy control property (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: imx6q-pcie: Add i.MX8Q PCIe compatible string (Myron Stowe) [RHEL-67693]
- PCI: dra7xx: Fix error handling when IRQ request fails in probe (Myron Stowe) [RHEL-67693]
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ (Myron Stowe) [RHEL-67693]
- PCI: cadence: Drop excess cdns_pcie_rc.dev kerneldoc description (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Sort enums, pcie_offsets[], pcie_cfg_data, .compatible strings (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Enable 7712 SoCs (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Change field name from 'type' to 'soc_base' (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Check return value of all reset_control_* calls (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Refactor for chips with many regular inbound windows (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Don't conflate the reset rescal with PHY ctrl (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Remove two unused constants from driver (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: PCI: brcmstb: Make HARD_DEBUG, INTR2_CPU_BASE offsets SoC-specific (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Use swinit reset if available (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Use bridge reset if available (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Use common error handling code in brcm_pcie_probe() (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: brcm,stb-pcie: Add 7712 SoC description (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: brcm,stb-pcie: Use maxItems for reset controllers (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: brcm,stb-pcie: Change brcmstb maintainer and cleanup (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: brcmstb: compatible is required (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: Add compatible string for Brcmstb 74[23]5 MIPs SOCs (Myron Stowe) [RHEL-67693]
- PCI: altera: Replace TLP_REQ_ID() with macro PCI_DEVID() (Myron Stowe) [RHEL-67693]
- PCI: xilinx: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: xilinx-nwl: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: vmd: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: tegra: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: rcar-host: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: mobiveil: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: mediatek: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: mediatek-gen3: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: dwc: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: brcmstb: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: altera-msi: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: aardvark: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- genirq/msi: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
- PCI: endpoint: Fix enum pci_epc_bar_type kerneldoc (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: qcom: Allow 'vddpe-3v3-supply' again (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: imx6q-pcie: Add reg-name "dbi2" and "atu" for i.MX8M PCIe Endpoint (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: altera: msi: Convert to YAML (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: altera: Convert to YAML (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: qcom,pcie-sc7280: Update bindings adding eight interrupts (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: layerscape-pci: Change property 'fsl,pcie-scfg' type (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: layerscape-pci: Add deprecated property 'num-viewport' (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with fsl,lx2160ar2-pcie (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: socionext,uniphier-pcie-ep: Add top-level constraints (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: renesas,pci-rcar-gen2: Add top-level constraints (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: hisilicon,kirin-pcie: Add top-level constraints (Myron Stowe) [RHEL-67693]
- dt-bindings: PCI: host-generic-pci: Drop minItems and maxItems of ranges (Myron Stowe) [RHEL-67693]
- s390/pci: Stop usurping pdev->dev.groups (Myron Stowe) [RHEL-67693]
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (Myron Stowe) [RHEL-67693]
- PCI: shpchp: Remove hpc_ops (Myron Stowe) [RHEL-67693]
- drm/ast: Request PCI BAR with devres (Myron Stowe) [RHEL-67693]
- PCI: Deprecate pcim_iomap_regions() in favor of pcim_iomap_region() (Myron Stowe) [RHEL-67693]
- PCI: Make pcim_request_region() a public function (Myron Stowe) [RHEL-67693]
- PCI: Rename CRS Completion Status to RRS (Myron Stowe) [RHEL-67693]
- PCI: aardvark: Correct Configuration RRS checking (Myron Stowe) [RHEL-67693]
- PCI/AER: Use PCI_DEVID() macro in aer_inject() (Myron Stowe) [RHEL-67693]
- s390/pci: Drop unneeded reference to CONFIG_DMI (Myron Stowe) [RHEL-67693]
- cpufreq/amd-pstate: Fix cpufreq_policy ref counting (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Fix max_perf updation with schedutil (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Remove the goto label in amd_pstate_update_limits (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Fix per-policy boost flag incorrect when fail (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Refactor max frequency calculation (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Fix prefcore rankings (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Drop boost_state variable (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Set different default EPP policy for Epyc and Ryzen (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Drop ret variable from amd_pstate_set_energy_pref_index() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Always write EPP value when updating perf (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Cache EPP value and use that everywhere (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Move limit updating code (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Change amd_pstate_update_perf() to return an int (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: store all values in cpudata struct in khz (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Only update the cached value in msr_set_epp() on success (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Use FIELD_PREP and FIELD_GET macros (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Drop cached epp_policy variable (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: convert mutex use to guard() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and amd_pstate_epp_offline() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Add trace event for EPP perf updates (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and amd_pstate_epp_offline() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Move the invocation of amd_pstate_update_perf() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Convert the amd_pstate_get/set_epp() to static calls (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Use boost numerator for upper bound of frequencies (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Store the boost numerator as highest perf again (David Arcari) [RHEL-75923]
- amd-pstate: Add missing documentation for `amd_pstate_prefcore_ranking` (David Arcari) [RHEL-75923]
- cpufreq: amd-pstate: Add documentation for `amd_pstate_hw_prefcore` (David Arcari) [RHEL-75923]
- Documentation: cpufreq: amd-pstate: update doc for Per CPU boost control method (David Arcari) [RHEL-75923]
- Documentation: PM: amd-pstate: add guided mode to the Operation mode (David Arcari) [RHEL-75923]
- Documentation: PM: amd-pstate: Fix section title underline (David Arcari) [RHEL-75923]
- Documentation: amd-pstate: introduce amd-pstate preferred core (David Arcari) [RHEL-75923]
- Documentation: admin-guide: PM: Fix two typos (David Arcari) [RHEL-75923]
- Documentation: cpufreq: amd-pstate: Update amd_pstate status sysfs for guided (David Arcari) [RHEL-75923]
- Documentation: amd-pstate: disambiguate user space sections (David Arcari) [RHEL-75923]
- Documentation: amd-pstate: introduce new global sysfs attributes (David Arcari) [RHEL-75923]
- Documentation: amd-pstate: add amd pstate driver mode introduction (David Arcari) [RHEL-75923]
- Documentation: amd-pstate: add EPP profiles introduction (David Arcari) [RHEL-75923]
- Documentation: amd-pstate: Add tbench and gitsource test introduction (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Detect preferred core support before driver registration (David Arcari) [RHEL-75923]
- ACPI: processor: Move arch_init_invariance_cppc() call later (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Move registration after static function call update (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Push adjust_perf vfunc init into cpu_init (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Align offline flow of shared memory and MSR based systems (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Do not attempt to clear MSR_AMD_CPPC_ENABLE (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Rename functions that enable CPPC (David Arcari) [RHEL-75923]
- amd-pstate: Switch to amd-pstate by default on some Server platforms (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate-ut: Add fix for min freq unit test (David Arcari) [RHEL-75923]
- amd-pstate: Set min_perf to nominal_perf for active mode performance gov (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Remove the redundant amd_pstate_set_driver() call (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Remove the switch case in amd_pstate_init() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Call amd_pstate_set_driver() in amd_pstate_register_driver() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Call amd_pstate_register() in amd_pstate_init() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Set the initial min_freq to lowest_nonlinear_freq (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Remove the redundant verify() function (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Drop needless EPP initialization (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Use amd_pstate_update_min_max_limit() for EPP limits (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Don't update CPPC request in amd_pstate_cpu_boost_update() (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Rename MSR and shared memory specific functions (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Fix non kerneldoc comment (David Arcari) [RHEL-75923]
- x86/cpufeatures: Rename X86_FEATURE_FAST_CPPC to have AMD prefix (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Use nominal perf for limits when boost is disabled (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate-ut: Fix an "Uninitialized variables" issue (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate-ut: Add test case for mode switches (David Arcari) [RHEL-75923]
- cpufreq/amd-pstate: Export symbols for changing modes (David Arcari) [RHEL-75923]
- cpufreq: amd-pstate: Optimize amd_pstate_update_limits() (David Arcari) [RHEL-75923]
- cpufreq: amd-pstate: Merge amd_pstate_highest_perf_set() into amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
- x86/amd: Detect preferred cores in amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
- x86/amd: Move amd_get_highest_perf() out of amd-pstate (David Arcari) [RHEL-75923]
- x86/amd: Rename amd_get_highest_perf() to amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
- x86/amd: Move amd_get_highest_perf() from amd.c to cppc.c (David Arcari) [RHEL-75923]
- MAINTAINERS: adjust file entry in INTEL TPMI DRIVER (David Arcari) [RHEL-79669]
- redhat: handle rename of intel_vsec.ko and intel_vsec_tpmi.ko (David Arcari) [RHEL-79669]
- tools/power/x86/intel-speed-select: v1.21 release (David Arcari) [RHEL-79669]
- tools/power/x86/intel-speed-select: Fix TRL restore after SST-TF disable (David Arcari) [RHEL-79669]
- platform/x86/intel: power-domains: Add Diamond Rapids support (David Arcari) [RHEL-79669]
- platform/x86/intel/tpmi/plr: Make char[] longer to silence warning (David Arcari) [RHEL-79669]
- platform/x86: intel: Add 'intel' prefix to the modules automatically (David Arcari) [RHEL-79669]
- platform/x86/intel/Makefile: cleanup (David Arcari) [RHEL-79669]
- platform/x86/intel: power-domains: Add Clearwater Forest support (David Arcari) [RHEL-74191]
- platform/x86: ISST: Add Clearwater Forest to support list (David Arcari) [RHEL-74191]
- platform/x86: ISST: Use in_range() to check package ID validity (David Arcari) [RHEL-79669]
- platform/x86/intel: pmt: Use y instead of objs in Makefile (David Arcari) [RHEL-79553]
- platform/x86/intel/pmt: Correct the typo 'ACCCESS_LOCAL' (David Arcari) [RHEL-79553]
- platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (David Arcari) [RHEL-79553]
- platform/x86: intel/pmc: Fix ioremap() of bad address (David Arcari) [RHEL-79553]
- x86/tsc: Move away from TSC leaf magic numbers (David Arcari) [RHEL-79553]
- x86/cpu: Move TSC CPUID leaf definition (David Arcari) [RHEL-79553]
- platform/x86/intel/pmt: allow user offset for PMT callbacks (David Arcari) [RHEL-79553]
- redhat: fix build/install targets in netfilter kselftest (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_flowtable.sh: make first pass deterministic (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_vrf.sh: add fib test case (Florian Westphal) [RHEL-21061]
- selftests: add regression test for br_netfilter panic (Florian Westphal) [RHEL-21061]
- selftests: netfilter: Avoid hanging ipvs.sh (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_tproxy.sh: add tcp tests (Florian Westphal) [RHEL-21061]
- selftests: netfilter: add test for br_netfilter+conntrack+queue combination (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_queue.sh: add test for disappearing listener (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_flowtable.sh: bump socat timeout to 1m (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_tcp_unreplied.sh: wait for initial connection attempt (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time (Florian Westphal) [RHEL-21061]
- selftests: netfilter: avoid test timeouts on debug kernels (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_zones_many.sh: set ct sysctl after ruleset load (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_vrf.sh: prefer socat, not iperf3 (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_flowtable.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_flowtable.sh: re-run with random mtu sizes (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_concat_range.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_concat_range.sh: drop netcat support (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_concat_range.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: update makefiles and kernel config (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_meta.sh: small shellcheck cleanup (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_fib.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_ipip_mtu.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_nat_zones.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_zones_many.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_synproxy.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_queue.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_queue.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_nat.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_flowtable.sh: move test to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_fib.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nft_conntrack_helper.sh: test to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: nf_nat_edemux.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: ipvs.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: place checktool helper in lib.sh (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_ipip_mtu.sh" move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_vrf.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_sctp_collision.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: br_netfilter.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: bridge_brouter.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
- selftests: netfilter: move to net subdir (Florian Westphal) [RHEL-21061]
- selftests: netfilter: synproxy test requires nf_conntrack (Florian Westphal) [RHEL-21061]
- selftests: netfilter: add bridge conntrack + multicast test case (Florian Westphal) [RHEL-21061]
- selftests: netfilter: test for sctp collision processing in nf_conntrack (Florian Westphal) [RHEL-21061]
- selftests: netfilter: fix libmnl pkg-config usage (Florian Westphal) [RHEL-21061]
- selftests: netfilter: fix a build error on openSUSE (Florian Westphal) [RHEL-21061]
- selftests: netfilter: add synproxy test (Florian Westphal) [RHEL-21061]
- selftests: netfilter: reduce zone stress test running time (Florian Westphal) [RHEL-21061]
- selftests: nft_flowtable.sh: check ingress/egress chain too (Florian Westphal) [RHEL-21061]
- selftests: nft_flowtable.sh: monitor result file sizes (Florian Westphal) [RHEL-21061]
- selftests: nft_flowtable.sh: wait for specific nc pids (Florian Westphal) [RHEL-21061]
- selftests: nft_flowtable.sh: no need for ps -x option (Florian Westphal) [RHEL-21061]
- selftests: nft_flowtable.sh: use /proc for pid checking (Florian Westphal) [RHEL-21061]
- testing: selftests: nft_flowtable.sh: rework test to detect offload failure (Florian Westphal) [RHEL-21061]
- testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal) [RHEL-21061]
- selftests: netfilter: add fib expression forward test case (Florian Westphal) [RHEL-21061]
- selftests: nft_concat_range: add socat support (Florian Westphal) [RHEL-21061]
- selftests: netfilter: extend nfqueue tests to cover vrf device (Florian Westphal) [RHEL-21061]
- thermal: Drop spaces before TABs (David Arcari) [RHEL-61357]
- thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir() (David Arcari) [RHEL-61357]
- thermal: core: Drop thermal_zone_device_is_enabled() (David Arcari) [RHEL-61357]
- thermal: core: Check passive delay in monitor_thermal_zone() (David Arcari) [RHEL-61357]
- thermal: core: Drop dead code from monitor_thermal_zone() (David Arcari) [RHEL-61357]
- thermal: core: Drop redundant lockdep_assert_held() (David Arcari) [RHEL-61357]
- thermal: sysfs: Add sanity checks for trip temperature and hysteresis (David Arcari) [RHEL-61357]
- thermal/of: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
- thermal: core: Fix rounding of delay jiffies (David Arcari) [RHEL-61357]
- thermal: core: Drop tz field from struct thermal_instance (David Arcari) [RHEL-61357]
- thermal: core: Drop redundant checks from thermal_bind_cdev_to_trip() (David Arcari) [RHEL-61357]
- thermal: core: Rename cdev-to-thermal-zone bind/unbind functions (David Arcari) [RHEL-61357]
- thermal: core: Clean up trip bind/unbind functions (David Arcari) [RHEL-61357]
- thermal: core: Drop unused bind/unbind functions and callbacks (David Arcari) [RHEL-61357]
- mlxsw: core_thermal: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
- thermal: core: Unexport thermal_bind_cdev_to_trip() and thermal_unbind_cdev_from_trip() (David Arcari) [RHEL-61357]
- thermal: ACPI: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
- thermal: core: Introduce .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
- thermal: core: Move thermal zone locking out of bind/unbind functions (David Arcari) [RHEL-61357]
- thermal: sysfs: Use the dev argument in instance-related show/store (David Arcari) [RHEL-61357]
- thermal: core: Drop redundant thermal instance checks (David Arcari) [RHEL-61357]
- thermal: core: Rearrange checks in thermal_bind_cdev_to_trip() (David Arcari) [RHEL-61357]
- thermal: core: Fold two functions into their respective callers (David Arcari) [RHEL-61357]
- thermal/core: Compute low and high boundaries in thermal_zone_device_update() (David Arcari) [RHEL-61357]
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths (David Arcari) [RHEL-61357]
- thermal: of: Fix OF node leak in thermal_of_zone_register() (David Arcari) [RHEL-61357]
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path (David Arcari) [RHEL-61357]
- thermal: gov_bang_bang: Use governor_data to reduce overhead (David Arcari) [RHEL-61357]
- thermal: helpers: Drop get_thermal_instance() (David Arcari) [RHEL-61357]
- thermal: trip: Avoid skipping trips in thermal_zone_set_trips() (David Arcari) [RHEL-61357]
- thermal: sysfs: Refine the handling of trip hysteresis changes (David Arcari) [RHEL-61357]
- thermal: sysfs: Get to trips via attribute pointers (David Arcari) [RHEL-61357]
- thermal: core: Store trip sysfs attributes in thermal_trip_desc (David Arcari) [RHEL-61357]
- thermal: trip: Drop thermal_zone_get_trip() (David Arcari) [RHEL-61357]
- thermal: qcom: Use thermal_zone_get_crit_temp() in qpnp_tm_init() (David Arcari) [RHEL-61357]
- thermal: trip: Get rid of thermal_zone_get_num_trips() (David Arcari) [RHEL-61357]
- thermal: tegra: Use thermal_zone_for_each_trip() for walking trip points (David Arcari) [RHEL-61357]
- thermal: core: Back off when polling thermal zones on errors (David Arcari) [RHEL-61357]
- thermal: trip: Split thermal_zone_device_set_mode() (David Arcari) [RHEL-61357]
- thermal: core: Allow thermal zones to tell the core to ignore them (David Arcari) [RHEL-61357]
- thermal: core: Add sanity checks for polling_delay and passive_delay (David Arcari) [RHEL-61357]
- thermal: core: Fix list sorting in __thermal_zone_device_update() (David Arcari) [RHEL-61357]
- thermal: core: Change passive_delay and polling_delay data type (David Arcari) [RHEL-61357]
- thermal: core: constify 'type' in devm_thermal_of_cooling_device_register() (David Arcari) [RHEL-61357]
- thermal: trip: Fold __thermal_zone_get_trip() into its caller (David Arcari) [RHEL-61357]
- thermal: core: Call monitor_thermal_zone() if zone temperature is invalid (David Arcari) [RHEL-61357]
- thermal: gov_step_wise: Go straight to instance->lower when mitigation is over (David Arcari) [RHEL-61357]
- thermal: core: Change PM notifier priority to the minimum (David Arcari) [RHEL-61357]
- thermal: core: Synchronize suspend-prepare and post-suspend actions (David Arcari) [RHEL-61357]
- thermal: gov_step_wise: Restore passive polling management (David Arcari) [RHEL-61357]
- thermal: ACPI: Invalidate trip points with temperature of 0 or below (David Arcari) [RHEL-61357]
- thermal: core: Do not fail cdev registration because of invalid initial state (David Arcari) [RHEL-61357]
- thermal: core: Avoid calling .trip_crossed() for critical and hot trips (David Arcari) [RHEL-61357]
- thermal: trip: Use READ_ONCE() for lockless access to trip properties (David Arcari) [RHEL-61357]
- thermal: trip: Make thermal_zone_set_trips() use trip thresholds (David Arcari) [RHEL-61357]
- thermal: trip: Rename __thermal_zone_set_trips() to thermal_zone_set_trips() (David Arcari) [RHEL-61357]
- thermal: trip: Use common set of trip type names (David Arcari) [RHEL-61357]
- thermal/debugfs: Move some statements from under thermal_dbg->lock (David Arcari) [RHEL-61357]
- thermal/debugfs: Compute maximum temperature for mitigation episode as a whole (David Arcari) [RHEL-61357]
- thermal/debugfs: Adjust check for trips without statistics in tze_seq_show() (David Arcari) [RHEL-61357]
- thermal/debugfs: Fix up units in "mitigations" files (David Arcari) [RHEL-61357]
- thermal/debugfs: Print mitigation timestamp value in milliseconds (David Arcari) [RHEL-61357]
- thermal/debugfs: Do not extend mitigation episodes beyond system resume (David Arcari) [RHEL-61357]
- thermal/debugfs: Use helper to update trip point overstepping duration (David Arcari) [RHEL-61357]
- thermal: trip: Trigger trip down notifications when trips involved in mitigation become invalid (David Arcari) [RHEL-61357]
- thermal: core: Introduce thermal_trip_crossed() (David Arcari) [RHEL-61357]
- thermal/debugfs: Allow tze_seq_show() to print statistics for invalid trips (David Arcari) [RHEL-61357]
- thermal/debugfs: Print initial trip temperature and hysteresis in tze_seq_show() (David Arcari) [RHEL-61357]
- thermal: core: Fix the handling of invalid trip points (David Arcari) [RHEL-61357]
- thermal: core: Move passive polling management to the core (David Arcari) [RHEL-61357]
- thermal: core: Do not call handle_thermal_trip() if zone temperature is invalid (David Arcari) [RHEL-61357]
- thermal: trip: Add missing empty code line (David Arcari) [RHEL-61357]
- thermal/debugfs: Pass cooling device state to thermal_debug_cdev_add() (David Arcari) [RHEL-61357]
- thermal/debugfs: Create records for cdev states as they get used (David Arcari) [RHEL-61357]
- thermal/debugfs: Avoid printing zero duration for mitigation events in progress (David Arcari) [RHEL-61357]
- thermal: core: Introduce thermal_governor_trip_crossed() (David Arcari) [RHEL-61357]
- thermal/debugfs: Make tze_seq_show() skip invalid trips and trips with no stats (David Arcari) [RHEL-61357]
- thermal/debugfs: Rename thermal_debug_update_temp() to thermal_debug_update_trip_stats() (David Arcari) [RHEL-61357]
- thermal/debugfs: Clean up thermal_debug_update_temp() (David Arcari) [RHEL-61357]
- thermal/debugfs: Avoid excessive updates of trip point statistics (David Arcari) [RHEL-61357]
- thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() (David Arcari) [RHEL-61357]
- thermal: core: Relocate critical and hot trip handling (David Arcari) [RHEL-61357]
- thermal: core: Drop the .throttle() governor callback (David Arcari) [RHEL-61357]
- thermal: gov_user_space: Use .trip_crossed() instead of .throttle() (David Arcari) [RHEL-61357]
- thermal: gov_fair_share: Eliminate unnecessary integer divisions (David Arcari) [RHEL-61357]
- thermal: gov_fair_share: Use trip thresholds instead of trip temperatures (David Arcari) [RHEL-61357]
- thermal: gov_fair_share: Use .manage() callback instead of .throttle() (David Arcari) [RHEL-61357]
- thermal: gov_step_wise: Clean up thermal_zone_trip_update() (David Arcari) [RHEL-61357]
- thermal: gov_step_wise: Use trip thresholds instead of trip temperatures (David Arcari) [RHEL-61357]
- thermal: gov_step_wise: Use .manage() callback instead of .throttle() (David Arcari) [RHEL-61357]
- thermal: core: Introduce .manage() callback for thermal governors (David Arcari) [RHEL-61357]
- thermal: core: Introduce .trip_crossed() callback for thermal governors (David Arcari) [RHEL-61357]
- thermal: core: Relocate the struct thermal_governor definition (David Arcari) [RHEL-61357]
- thermal: gov_step_wise: Simplify checks related to passive trips (David Arcari) [RHEL-61357]
- thermal: gov_step_wise: Simplify get_target_state() (David Arcari) [RHEL-61357]
- thermal: core: Sort trip point crossing notifications by temperature (David Arcari) [RHEL-61357]
- thermal: core: Send trip crossing notifications at init time if needed (David Arcari) [RHEL-61357]
- thermal: core: Rewrite comments in handle_thermal_trip() (David Arcari) [RHEL-61357]
- thermal: core: Make struct thermal_zone_device definition internal (David Arcari) [RHEL-61357]
- thermal: core: Move threshold out of struct thermal_trip (David Arcari) [RHEL-61357]
- thermal: netlink: Rename thermal_gnl_family (David Arcari) [RHEL-61357]
- thermal/of: Assume polling-delay(-passive) 0 when absent (David Arcari) [RHEL-61357]
- thermal: core: Eliminate writable trip points masks (David Arcari) [RHEL-61357]
- thermal: of: Set THERMAL_TRIP_FLAG_RW_TEMP directly (David Arcari) [RHEL-61357]
- thermal: ACPI: Discard trips table after zone registration (David Arcari) [RHEL-61357]
- thermal: ACPI: Constify acpi_thermal_zone_ops (David Arcari) [RHEL-61357]
- wifi: iwlwifi: mvm: Set THERMAL_TRIP_FLAG_RW_TEMP directly (David Arcari) [RHEL-61357]
- thermal: core: Change governor name to const char pointer (David Arcari) [RHEL-61357]
- thermal: gov_fair_share: Fix dependency on trip points ordering (David Arcari) [RHEL-61357]
- thermal/hwmon: Add error information printing for devm_thermal_add_hwmon_sysfs() (David Arcari) [RHEL-61357]
- thermal: gov_step_wise: Fold update_passive_instance() into its caller (David Arcari) [RHEL-61357]
- thermal: gov_fair_share: Rearrange get_trip_level() (David Arcari) [RHEL-61357]
- thermal: core: Drop thermal_zone_device_register() (David Arcari) [RHEL-61357]
- thermal: Allow selecting the bang-bang governor as default (David Arcari) [RHEL-61357]
- thermal: helpers: Use for_each_trip() in __thermal_zone_get_temp() (David Arcari) [RHEL-61357]
- thermal: trip: Drop redundant __thermal_zone_get_trip() header (David Arcari) [RHEL-61357]
- thermal/hwmon: Use the thermal_core.h header (David Arcari) [RHEL-61357]
- thermal/hwmon: Use the right device for devm_thermal_add_hwmon_sysfs() (David Arcari) [RHEL-61357]
- thermal/core: Use the thermal zone 'devdata' accessor in hwmon located drivers (David Arcari) [RHEL-61357]
- thermal/drivers/rcar: Use generic thermal_zone_get_trip() function (David Arcari) [RHEL-61357]
- thermal/drivers/rcar_thermal: Constify static thermal_zone_device_ops (David Arcari) [RHEL-61357]
- thermal: hisi: Use thermal_zone_for_each_trip() in hisi_thermal_register_sensor() (David Arcari) [RHEL-61357]
- thermal/core: Use the thermal zone 'devdata' accessor in thermal located drivers [partial] (David Arcari) [RHEL-61357]
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (Jon Maloy) [RHEL-67470] {CVE-2024-53114}
- powerpc/xics: fix refcount leak in icp_opal_init() (Mamatha Inamdar) [RHEL-80861] {CVE-2022-49432}
- powerpc/papr_scm: don't requests stats with '0' sized stats buffer (Mamatha Inamdar) [RHEL-81000] {CVE-2022-49353}
- powerpc/papr_scm: Fix leaking nvdimm_events_map elements (Mamatha Inamdar) [RHEL-81000] {CVE-2022-49353}
- powerpc/xive: Fix refcount leak in xive_spapr_init (Mamatha Inamdar) [RHEL-80849] {CVE-2022-49437}
- powerpc/xive: Add some error handling code to 'xive_spapr_init()' (Mamatha Inamdar) [RHEL-80849] {CVE-2022-49437}
- zram: fix potential UAF of zram table (Ming Lei) [RHEL-77216] {CVE-2025-21671}
- zram: fix uninitialized ZRAM not releasing backing device (Ming Lei) [RHEL-77216]
- block: fix uaf for flush rq while iterating tags (Ming Lei) [RHEL-75854] {CVE-2024-53170}
- blk-cgroup: Fix UAF in blkcg_unpin_online() (Ming Lei) [RHEL-75869] {CVE-2024-56672}
- block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Ming Lei) [RHEL-77310] {CVE-2025-21631}
- bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-75544]
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CKI Backport Bot) [RHEL-77915] {CVE-2024-53680}
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-77891] {CVE-2025-21648}
- rxrpc: Fix a race between socket set up and I/O thread creation (Marc Dionne) [RHEL-63629] {CVE-2024-49864}
- afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-77202] {CVE-2025-21672}
- afs: Fix lock recursion (Marc Dionne) [RHEL-68562] {CVE-2024-53090}
- rxrpc: Fix missing locking causing hanging calls (Marc Dionne) [RHEL-67999] {CVE-2024-50294}
- SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington) [RHEL-73706]
- redhat: bump RHEL_MINOR for 9.7 (Augusto Caringi)
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-62750]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-62750]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-62750]
- ice: Fix E825 initialization (Petr Oros) [RHEL-62750]
- powerpc/pseries/dlpar: Add device tree nodes for DLPAR IO add (Mamatha Inamdar) [RHEL-77266]
- powerpc/pseries/dlpar: Remove device tree node for DLPAR IO remove (Mamatha Inamdar) [RHEL-77266]
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (Mamatha Inamdar) [RHEL-77266]
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (David Arcari) [RHEL-66942] {CVE-2024-50195}
- posix-clock: Fix missing timespec64 check in pc_clock_settime() (David Arcari) [RHEL-66942] {CVE-2024-50195}
- powerpc/64s/radix/kfence: map __kfence_pool at page granularity (Mamatha Inamdar) [RHEL-73626]
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-72325] {CVE-2024-56603}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-72261] {CVE-2024-56645}
- can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-72057] {CVE-2023-52922}
- net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79811]
- net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79813]
- s390/pai: export number of sysfs attribute files (Mete Durlu) [RHEL-79808]
- s390/pai: fix attr_event_free upper limit for pai device drivers (Mete Durlu) [RHEL-79808]
- smb: client: fix chmod(2) regression with ATTR_READONLY (Paulo Alcantara) [RHEL-78507]
- s390/topology: Improve topology detection (Mete Durlu) [RHEL-76350]
- ice: Fix signedness bug in ice_init_interrupt_scheme() (Petr Oros) [RHEL-63642]
- ice: init flow director before RDMA (Petr Oros) [RHEL-63642]
- ice: simplify VF MSI-X managing (Petr Oros) [RHEL-63642]
- ice: enable_rdma devlink param (Petr Oros) [RHEL-63642]
- ice: treat dyn_allowed only as suggestion (Petr Oros) [RHEL-63642]
- ice, irdma: move interrupts code to irdma (Petr Oros) [RHEL-63642]
- ice: get rid of num_lan_msix field (Petr Oros) [RHEL-63642]
- ice: remove splitting MSI-X between features (Petr Oros) [RHEL-63642]
- ice: devlink PF MSI-X max and min parameter (Petr Oros) [RHEL-63642]
- ice: ice_probe: init ice_adapter after HW init (Petr Oros) [RHEL-63642]
- ice: minor: rename goto labels from err to unroll (Petr Oros) [RHEL-63642]
- ice: split ice_init_hw() out from ice_init_dev() (Petr Oros) [RHEL-63642]
- ice: c827: move wait for FW to ice_init_hw() (Petr Oros) [RHEL-63642]


###
# The following Emacs magic makes C-c C-e use UTC dates.
# Local Variables:
# rpm-change-log-uses-utc: t
# End:
###