# changelog

author: Augusto Caringi <acaringi@redhat.com> [5.14.0-573.el9]
changelog:
  - rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-79818]
  - Revert "mm: add vma_has_recency()" (Luiz Capitulino) [RHEL-80655]
  - Revert "mm: support POSIX_FADV_NOREUSE" (Luiz Capitulino) [RHEL-80655]
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Rupinderjit Singh) [RHEL-80628]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80527 RHEL-78507]
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21980] {CVE-2024-57807}
  - scsi: core: Fix command pass through retry regression (Ewan D. Milne) [RHEL-77122]
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Baoquan He) [RHEL-79112] {CVE-2025-21694}
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-49958 RHEL-6641 RHEL-77115]
  - CVE-2025-1272: security: Re-enable lockdown LSM in some setup_arch() (Lenny Szubowicz) [RHEL-78974] {CVE-2025-1272}
  - redhat/self-test: Remove --all from git query (Prarit Bhargava)
  - redhat: fix selftest git command so it picks the right commit (Patrick Talbert)
  - arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71914]
  - Documentation/powerpc/fadump: add additional parameter feature details (Mamatha Inamdar) [RHEL-74219]
  - powerpc: increase MIN RMA size for CAS negotiation (Mamatha Inamdar) [RHEL-74219]
  - powerpc/fadump: fix additional param memory reservation for HASH MMU (Mamatha Inamdar) [RHEL-74219]
  - powerpc: export MIN RMA size (Mamatha Inamdar) [RHEL-74219]
  - cxgb4: use port number to set mac addr (Michal Schmidt) [RHEL-75514]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-9309]
  - gitlab-ci: add jobs for rhel9 automotive pipelines (Michael Hofmann)
  - gitlab-ci: clean up trigger job naming and template inheritance (Michael Hofmann)
  - can: bcm: Fix UAF in bcm_proc_show() (Michal Schmidt) [RHEL-80748] {CVE-2023-52922}
  - Revert "x86/kvm: Override default caching mode for SEV-SNP and TDX" (Vitaly Kuznetsov) [RHEL-75512]
  - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-68688]
  - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78429]
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Ewan D. Milne) [RHEL-75864] {CVE-2024-56631}
  - RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (Aristeu Rozanski) [RHEL-22695]
  - ACPI: PRM: Add PRM handler direct call support (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Clean up white space and add __init annotation (Aristeu Rozanski) [RHEL-22695]
  - acpi/prmt: Use EFI runtime sandbox to invoke PRM handlers (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Don't duplicate setup/teardown code (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrapper: Move workqueue manipulation out of line (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Use type safe encapsulation of call arguments (Aristeu Rozanski) [RHEL-22695]
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-82537]
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding (CKI Backport Bot) [RHEL-83546]
  - pm: cpupower: Add missing residency header changes in cpuidle.h to SWIG (David Arcari) [RHEL-80660]
  - pm: cpupower: Add header changes for cpufreq.h to SWIG bindings (David Arcari) [RHEL-80660]
  - pm: cpupower: Add install and uninstall options to bindings makefile (David Arcari) [RHEL-80660]
  - cpupower: Adjust whitespace for amd-pstate specific prints (David Arcari) [RHEL-80660]
  - cpupower: Don't fetch maximum latency when EPP is enabled (David Arcari) [RHEL-80660]
  - cpupower: Add support for showing energy performance preference (David Arcari) [RHEL-80660]
  - cpupower: Don't try to read frequency from hardware when kernel uses aperfmperf (David Arcari) [RHEL-80660]
  - cpupower: Add support for amd-pstate preferred core rankings (David Arcari) [RHEL-80660]
  - cpupower: Add support for parsing 'enabled' or 'disabled' strings from table (David Arcari) [RHEL-80660]
  - cpupower: Remove spurious return statement (David Arcari) [RHEL-80660]
  - cpupower: fix TSC MHz calculation (David Arcari) [RHEL-80660]
  - cpupower: revise is_valid flag handling for idle_monitor (David Arcari) [RHEL-80660]
  - pm: cpupower: Makefile: Fix cross compilation (David Arcari) [RHEL-80660]
  - cpupower: add checks for xgettext and msgfmt (David Arcari) [RHEL-80660]
  - cpupower: Add Chinese Simplified translation (David Arcari) [RHEL-80660]
  - pm: cpupower: bindings: Add test to confirm cpu state is disabled (David Arcari) [RHEL-80660]
  - pm: cpupower: bindings: Improve disable c_state block (David Arcari) [RHEL-80660]
  - pm: cpupower: gitignore: Add compile_commands.json (David Arcari) [RHEL-80660]
  - pm: cpupower: Makefile: Allow overriding cross-compiling env params (David Arcari) [RHEL-80660]
  - pm: cpupower: bench: print config file path when open cpufreq-bench.conf fails (David Arcari) [RHEL-80660]
  - tools/power/cpupower: Add documentation for some recently introduced options (David Arcari) [RHEL-80660]
  - pm: cpupower: Clean up bindings gitignore (David Arcari) [RHEL-80660]
  - pm: cpupower: rename raw_pylibcpupower.i (David Arcari) [RHEL-80660]
  - pm:cpupower: Add error warning when SWIG is not installed (David Arcari) [RHEL-80660]
  - pm:cpupower: Include test_raw_pylibcpupower.py (David Arcari) [RHEL-80660]
  - pm:cpupower: Add SWIG bindings files for libcpupower (David Arcari) [RHEL-80660]
  - pm:cpupower: Add missing powercap_set_enabled() stub function (David Arcari) [RHEL-80660]
  - cpupower: fix lib default installation path (David Arcari) [RHEL-80660]
  - cpupower: Disable direct build of the 'bench' subproject (David Arcari) [RHEL-80660]
  - cpupower: Remove absent 'v' parameter from monitor man page (David Arcari) [RHEL-80660]
  - cpupower: Improve cpupower build process description (David Arcari) [RHEL-80660]
  - cpupower: Add 'help' target to the main Makefile (David Arcari) [RHEL-80660]
  - cpupower: Replace a dead reference link with working ones (David Arcari) [RHEL-80660]
  - Fix cpupower-frequency-info.1 man page typo (David Arcari) [RHEL-80660]
  - tools cpupower bench: Override CFLAGS assignments (David Arcari) [RHEL-80660]
  - cpupower: fix reference to nonexistent document (David Arcari) [RHEL-80660]
  - EDAC/amd64: Simplify ECC check on unified memory controllers (Aristeu Rozanski) [RHEL-73049]
  - PCI: vmd: Set devices to D0 before enabling PM L1 Substates (Myron Stowe) [RHEL-47438]
  - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (Myron Stowe) [RHEL-47438]
  - can: isotp: fix support for transmission of SF without flow control (Radu Rendec) [RHEL-80832]
  - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (Radu Rendec) [RHEL-80832]
  - can: isotp: restore accidentally removed MSG_PEEK feature (Radu Rendec) [RHEL-80832]
  - can: isotp: fix race between isotp_sendsmg() and isotp_release() (Radu Rendec) [RHEL-80832]
  - can: isotp: handle wait_event_interruptible() return values (Radu Rendec) [RHEL-80832]
  - can: isotp: split tx timer into transmission and timeout (Radu Rendec) [RHEL-80832]
  - can: isotp: fix potential CAN frame reception race in isotp_rcv() (Radu Rendec) [RHEL-80832]
  - can: isotp: fix tx state handling for echo tx processing (Radu Rendec) [RHEL-80832]
  - can: isotp: isotp_bind(): do not validate unused address information (Radu Rendec) [RHEL-80832]
  - can: isotp: add support for transmission without flow control (Radu Rendec) [RHEL-80832]
  - can: isotp: remove re-binding of bound socket (Radu Rendec) [RHEL-80832]
  - can: isotp: stop timeout monitoring when no first frame was sent (Radu Rendec) [RHEL-80832]
  - can: isotp: support MSG_TRUNC flag when reading from socket (Radu Rendec) [RHEL-80832]
  - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Radu Rendec) [RHEL-80832]
  - can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting (Radu Rendec) [RHEL-80832]
  - can: isotp: sanitize CAN ID checks in isotp_bind() (Radu Rendec) [RHEL-80832] {CVE-2022-49269}
  - can: isotp: set max PDU size to 64 kByte (Radu Rendec) [RHEL-80832]
  - can: isotp: set default value for N_As to 50 micro seconds (Radu Rendec) [RHEL-80832]
  - can: isotp: add local echo tx processing for consecutive frames (Radu Rendec) [RHEL-80832]
  - selftests: livepatch: test livepatching a kprobed function (Denis Aleksandrov) [RHEL-80215]
  - selftests: livepatch: save and restore kprobe state (Denis Aleksandrov) [RHEL-80215]
  - selftests: livepatch: rename KLP_SYSFS_DIR to SYSFS_KLP_DIR (Denis Aleksandrov) [RHEL-80215]
  - Documentation: livepatch: Correct release locks antonym (Denis Aleksandrov) [RHEL-80215]
  - EDAC/mce_amd: Add support for FRU text in MCA (Aristeu Rozanski) [RHEL-52657]
  - x86/mce/apei: Handle variable SMCA BERT record size (Aristeu Rozanski) [RHEL-52657]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Aristeu Rozanski) [RHEL-52657]
  - tracing: Add __print_dynamic_array() helper (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Rename mce_setup() to mce_prep_record() (Aristeu Rozanski) [RHEL-52657]
  - workqueue: Put the pwq after detaching the rescuer from the pool (CKI Backport Bot) [RHEL-81472] {CVE-2025-21786}
  - EDAC/{i10nm,skx,skx_common}: Support UV systems (Aristeu Rozanski) [RHEL-73892]
  - x86/xen: add FRAME_END to xen_hypercall_hvm() (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/asm: Make serialize() always_inline (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: fix 32-bit build (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: add central hypercall functions (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: don't do PV iret hypercall through hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: provide a way to do very early static-call updates (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - objtool/x86: allow syscall instruction (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86: make get_cpu_vendor() accessible from Xen code (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: Avoid relocatable quantities in Xen ELF notes (Vitaly Kuznetsov) [RHEL-70669]
  - tracing: Fix bad hist from corrupting named_triggers list (Tomas Glozar) [RHEL-81911]
  - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Tomas Glozar) [RHEL-81911]
  - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Tomas Glozar) [RHEL-81911]
  - Documentation/sysctl: Add timer_migration to kernel.rst (Phil Auld) [RHEL-11707]
  - netfilter: nfnetlink_queue: drop bogus WARN_ON (Florian Westphal) [RHEL-80104]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-574.el9]
changelog:
  - ima: Fix a potential integer overflow in ima_appraise_measurement (CKI Backport Bot) [RHEL-80802] {CVE-2022-49643}
  - selftests/mm: hugetlb_fault_after_madv: improve test output (David Hildenbrand) [RHEL-60023]
  - selftests/mm: hugetlb_fault_after_madv: use default hugetlb page size (David Hildenbrand) [RHEL-60023]
  - Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CKI Backport Bot) [RHEL-81375] {CVE-2024-57988}
  - list: fix a data-race around ep->rdllist (Jan Stancek) [RHEL-80985] {CVE-2022-49443}
  - Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CKI Backport Bot) [RHEL-81268] {CVE-2024-57987}
  - RDMA/nldev: Set error code in rdma_nl_notify_event (Kamal Heib) [RHEL-77880]
  - RDMA/core: Fix ENODEV error for iWARP test over vlan (Kamal Heib) [RHEL-77880]
  - IB/cm: Rework sending DREQ when destroying a cm_id (Kamal Heib) [RHEL-77880]
  - IB/cm: Do not hold reference on cm_id unless needed (Kamal Heib) [RHEL-77880]
  - IB/cm: Explicitly mark if a response MAD is a retransmission (Kamal Heib) [RHEL-77880]
  - RDMA/nldev: Add IB device and net device rename events (Kamal Heib) [RHEL-77880]
  - RDMA/core: Move ib_uverbs_file struct to uverbs_types.h (Kamal Heib) [RHEL-77880]
  - RDMA/core: Add device ufile cleanup operation (Kamal Heib) [RHEL-77880]
  - RDMA: Use ethtool string helpers (Kamal Heib) [RHEL-77880]
  - RDMA/ipoib: Use the networking stack default for txqueuelen (Kamal Heib) [RHEL-77880]
  - RDMA/srpt: Make slab cache names unique (Kamal Heib) [RHEL-77880]
  - efi: Add iMac Pro 2017 to uefi skip cert quirk (Coiby Xu) [RHEL-80989]
  - efi: Correct Macmini DMI match in uefi cert quirk (Coiby Xu) [RHEL-80989]
  - efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CKI Backport Bot) [RHEL-80989] {CVE-2022-49357}
  - NFSD: fix hang in nfsd4_shutdown_callback (Olga Kornievskaia) [RHEL-81291] {CVE-2025-21795}
  - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CKI Backport Bot) [RHEL-81439] {CVE-2024-58012}
  - netfilter: nf_tables: reject mismatching sum of field_len with set key length (CKI Backport Bot) [RHEL-82489] {CVE-2025-21826}
  - usbnet: fix memory leak in error case (CKI Backport Bot) [RHEL-80848] {CVE-2022-49657}
  - crypto: tegra - do not transfer req when tegra init fails (CKI Backport Bot) [RHEL-82476] {CVE-2024-58075}
  - RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Validate address map when information is gathered (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Expand helpers for adding and removing base and hole (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Read DRAM hole base early (Aristeu Rozanski) [RHEL-22697]
  - RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (Aristeu Rozanski) [RHEL-22697]
  - configs: enable IVPU driver on RHEL (Karol Herbst) [RHEL-38583]
  - accel: add build system changes (Karol Herbst) [RHEL-38583]
  - accel: backport ivpu driver from v6.12 (Karol Herbst) [RHEL-38583]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-575.el9]
changelog:
  - PCI/bwctrl: Fix NULL pointer deref on unbind and bind (Myron Stowe) [RHEL-81906]
  - PCI/bwctrl: Enable only if more than one speed is supported (Myron Stowe) [RHEL-81906]
  - PCI: Honor Max Link Speed when determining supported speeds (Myron Stowe) [RHEL-81906]
  - PCI: Drop duplicate pcie_get_speed_cap(), pcie_get_width_cap() declarations (Myron Stowe) [RHEL-81906]
  - PCI/bwctrl: Add pcie_set_target_speed() to set PCIe Link Speed (Myron Stowe) [RHEL-81906]
  - PCI/bwctrl: Re-add BW notification portdrv as PCIe BW controller (Myron Stowe) [RHEL-81906]
  - PCI: Abstract LBMS seen check into pcie_lbms_seen() (Myron Stowe) [RHEL-81906]
  - PCI: Refactor pcie_update_link_speed() (Myron Stowe) [RHEL-81906]
  - PCI: Store all PCIe Supported Link Speeds (Myron Stowe) [RHEL-81906]
  - PCI: Protect Link Control 2 Register with RMW locking (Myron Stowe) [RHEL-81906]
  - Documentation PCI: Reformat RMW ops documentation (Myron Stowe) [RHEL-81906]
  - thermal/of: Fix cdev lookup in thermal_of_should_bind() (David Arcari) [RHEL-79821]
  - thermal: of: Simplify thermal_of_should_bind with scoped for each OF child (David Arcari) [RHEL-79821]
  - thermal: intel: Fix compile issue when CONFIG_NET is not defined (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: Panther Lake power floor and workload hint support (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: Panther Lake DLVR support (David Arcari) [RHEL-79821]
  - thermal: intel: Remove explicit user_space governor selection (David Arcari) [RHEL-79821]
  - ACPI: DPTF: Support Panther Lake (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: processor: Enable MMIO RAPL for Panther Lake (David Arcari) [RHEL-79821]
  - thermal: int3400: Remove unneeded data_vault attribute_group (David Arcari) [RHEL-79821]
  - thermal: int3400: Fix reading of current_uuid for active policy (David Arcari) [RHEL-79821]
  - x86/cpu: Fix FAM5_QUARK_X1000 to use X86_MATCH_VFM() (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support (David Arcari) [RHEL-79821]
  - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support (David Arcari) [RHEL-79821]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-79821]
  - thermal: intel: intel_tcc_cooling: Switch to new Intel CPU model defines (David Arcari) [RHEL-79821]
  - thermal: intel: intel_pch: Improve cooling log (David Arcari) [RHEL-79821]
  - x86/cpu/topology: Remove topology_max_die_per_package() (David Arcari) [RHEL-79821]
  - x86/cpu/topology: Rename topology_max_die_per_package() [partial] (David Arcari) [RHEL-79821]
  - arch/powerpc/perf: Update get_mem_data_src function to use saved values of sier and mmcra regs (Mamatha Inamdar) [RHEL-80602]
  - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Mamatha Inamdar) [RHEL-80602]
  - certs: Add ECDSA signature verification self-test (Herbert Xu) [RHEL-81929]
  - certs: Move RSA self-test data to separate file (Herbert Xu) [RHEL-81929]
  - certs: Break circular dependency when selftest is modular (Herbert Xu) [RHEL-81929]
  - KEYS: Include linux/errno.h in linux/verification.h (Herbert Xu) [RHEL-81929]
  - crypto: certs: fix FIPS selftest dependency (Herbert Xu) [RHEL-81929]
  - certs: Add support for using elliptic curve keys for signing modules (Herbert Xu) [RHEL-81929]
  - certs: Trigger creation of RSA module signing key if it's not an RSA key (Herbert Xu) [RHEL-81929]
  - dpll: add clock quality level attribute and op (Petr Oros) [RHEL-77838]
  - tpm: Change to kvalloc() in eventlog/acpi.c (CKI Backport Bot) [RHEL-81489] {CVE-2024-58005}
  - selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation (Rafael Aquini) [RHEL-74363]
  - vrf: use RCU protection in l3mdev_l3_out() (Guillaume Nault) [RHEL-81542] {CVE-2025-21791}
  - smb: client: fix regression with guest option (Paulo Alcantara) [RHEL-83858]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-576.el9]
changelog:
  - md/raid1: fix memory leak in raid1_run() if no active rdev (Nigel Croxon) [RHEL-83988]
  - md/raid1: don't free conf on raid0_run failure (Nigel Croxon) [RHEL-83988]
  - md/raid0: don't free conf on raid0_run failure (Nigel Croxon) [RHEL-83988]
  - md: switch personalities faulty multipath to use md_submodule_head (Nigel Croxon) [RHEL-83988]
  - async_xor: Remove unused 'async_xor_val' (Nigel Croxon) [RHEL-83988]
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Nigel Croxon) [RHEL-83988]
  - md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Nigel Croxon) [RHEL-83988]
  - md/raid1,raid10: don't ignore IO flags (Nigel Croxon) [RHEL-83988]
  - md/raid5: merge reshape_progress checking inside get_reshape_loc() (Nigel Croxon) [RHEL-83988]
  - md: fix mddev uaf while iterating all_mddevs list (Nigel Croxon) [RHEL-83988]
  - md: switch md-cluster to use md_submodle_head (Nigel Croxon) [RHEL-83988]
  - md: switch personalities to use md_submodule_head (Nigel Croxon) [RHEL-83988]
  - md: don't export md_cluster_ops (Nigel Croxon) [RHEL-83988]
  - md/md-cluster: cleanup md_cluster_ops reference (Nigel Croxon) [RHEL-83988]
  - md: introduce struct md_submodule_head and APIs (Nigel Croxon) [RHEL-83988]
  - md: only include md-cluster.h if necessary (Nigel Croxon) [RHEL-83988]
  - md: merge common code into find_pers() (Nigel Croxon) [RHEL-83988]
  - md: ensure resync is prioritized over recovery (Nigel Croxon) [RHEL-83988]
  - md: Fix linear_set_limits() (Nigel Croxon) [RHEL-83988]
  - md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-83988]
  - md: reintroduce md-linear (Nigel Croxon) [RHEL-83988]
  - md: Remove deprecated CONFIG_MD_LINEAR (Nigel Croxon) [RHEL-83988]
  - md/linear: Get rid of md-linear.h (Nigel Croxon) [RHEL-83988]
  - md/md-linear: Annotate struct linear_conf with __counted_by (Nigel Croxon) [RHEL-83988]
  - Revert "Upstream has changed the APIs to suspend the array." (Nigel Croxon) [RHEL-83988]
  - Revert "md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add()" (Nigel Croxon) [RHEL-83988]
  - bpf: Remove unnecessary BTF lookups in bpf_sk_storage_tracing_allowed (CKI Backport Bot) [RHEL-82439]
  - tools/power turbostat: version 2025.02.02 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add CPU%c1e BIC for CWF (David Arcari) [RHEL-84464]
  - tools/power turbostat: Harden one-shot mode against cpu offline (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix forked child affinity regression (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add tcore clock PMT type (David Arcari) [RHEL-84464]
  - tools/power turbostat: version 2025.01.14 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Allow adding PMT counters directly by sysfs path (David Arcari) [RHEL-84464]
  - tools/power turbostat: Allow mapping multiple PMT files with the same GUID (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add PMT directory iterator helper (David Arcari) [RHEL-84464]
  - tools/power turbostat: Extend PMT identification with a sequence number (David Arcari) [RHEL-84464]
  - tools/power turbostat: Return default value for unmapped PMT domains (David Arcari) [RHEL-84464]
  - tools/power turbostat: Check for non-zero value when MSR probing (David Arcari) [RHEL-84464]
  - tools/power turbostat: Enhance turbostat self-performance visibility (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add fixed RAPL PSYS divisor for SPR (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix PMT mmaped file size rounding (David Arcari) [RHEL-84464]
  - tools/power turbostat: Remove SysWatt from DISABLED_BY_DEFAULT (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add an NMI column (David Arcari) [RHEL-84464]
  - tools/power turbostat: add Busy% to "show idle" (David Arcari) [RHEL-84464]
  - tools/power turbostat: Introduce --force parameter (David Arcari) [RHEL-84464]
  - tools/power turbostat: Improve --help output (David Arcari) [RHEL-84464]
  - tools/power turbostat: Exit on unsupported Vendors (David Arcari) [RHEL-84464]
  - tools/power turbostat: Exit on unsupported Intel models (David Arcari) [RHEL-84464]
  - tools/power turbostat: update turbostat(8) (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add initial support for ClearwaterForest (David Arcari) [RHEL-45097 RHEL-84464]
  - tools/power turbostat: Add initial support for PantherLake (David Arcari) [RHEL-47460 RHEL-84464]
  - tools/power turbostat: 2024.11.30 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add RAPL psys as a built-in counter (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix child's argument forwarding (David Arcari) [RHEL-84464]
  - tools/power turbostat: Force --no-perf in --dump mode (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add support for /sys/class/drm/card1 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Cache graphics sysfs file descriptors during probe (David Arcari) [RHEL-84464]
  - tools/power turbostat: Consolidate graphics sysfs access (David Arcari) [RHEL-84464]
  - tools/power turbostat: Remove unnecessary fflush() call (David Arcari) [RHEL-84464]
  - tools/power turbostat: Enhance platform divergence description (David Arcari) [RHEL-84464]
  - tools/power turbostat: Remove PC3 support on Lunarlake (David Arcari) [RHEL-84464]
  - tools/power turbostat: Rename arl_features to lnl_features (David Arcari) [RHEL-84464]
  - tools/power turbostat: Add back PC8 support on Arrowlake (David Arcari) [RHEL-84464]
  - tools/power turbostat: Remove PC7/PC9 support on MTL (David Arcari) [RHEL-84464]
  - tools/power turbostat: Honor --show CPU, even when even when num_cpus=1 (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix trailing '\n' parsing (David Arcari) [RHEL-84464]
  - tools/power turbostat: Allow using cpu device in perf counters on hybrid platforms (David Arcari) [RHEL-84464]
  - tools/power turbostat: Fix column printing for PMT xtal_time counters (David Arcari) [RHEL-84464]
  - tools/power turbostat: fix GCC9 build regression (David Arcari) [RHEL-84464]
  - cgroup: Remove steal time from usage_usec (Waiman Long) [RHEL-79933]
  - KVM: selftests: Allow running a single iteration of dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Fix an off-by-one in the number of dirty_log_test iterations (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Set per-iteration variables at the start of each iteration (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Tighten checks around prev iter's last dirty page in ring (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Ensure guest writes min number of pages in dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: sefltests: Verify value of dirty_log_test last page isn't bogus (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Collect *all* dirty entries in each dirty_log_test iteration (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Print (previous) last_page on dirty page value mismatch (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Use continue to handle all "pass" scenarios in dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Post to sem_vcpu_stop if and only if vcpu_stop is true (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Keep dirty_log_test vCPU in guest until it needs to stop (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Honor "stop" request in dirty ring test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Limit dirty_log_test's s390x workaround to s390x (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Continuously reap dirty ring while vCPU is running (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Read per-page value into local var when verifying dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Precisely track number of dirty/clear pages for each iteration (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Drop stale srandom() initialization from dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Drop signal/kick from dirty ring testcase (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Sync dirty_log_test iteration to guest *before* resuming (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Support multiple write retires in dirty_log_test (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Add vcpu_arch_put_guest() to do writes from guest code (Maxim Levitsky) [RHEL-67879]
  - KVM: selftests: Provide a global pseudo-RNG instance for all tests (Maxim Levitsky) [RHEL-67879]
  - KVM: VMX: read the PML log in the same order as it was written (Maxim Levitsky) [RHEL-67879]
  - KVM: VMX: refactor PML terminology (Maxim Levitsky) [RHEL-67879]
  - arch/x86/kernel/setup.c: fix rh_check_supported (Tomas Henzl) [RHEL-71452]
  - selftests/bpf: Add tests for bpf_get_dentry_xattr (Gregory Bell) [RHEL-33903]
  - bpf: Add kfunc bpf_get_dentry_xattr() to read xattr from dentry (Gregory Bell) [RHEL-33903]
  - bpf: Move bpf_get_file_xattr to fs/bpf_fs_kfuncs.c (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Attempt to build BPF programs with -Wsign-compare (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Fixes tests for filesystem kfuncs (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Fix spelling mistake "get_signaure_size" -> "get_signature_size" (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Add test that uses fsverity and xattr to sign a file (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Add tests for filesystem kfuncs (Gregory Bell) [RHEL-33903]
  - selftests/bpf: Sort config in alphabetic order (Gregory Bell) [RHEL-33903]
  - Documentation/bpf: Add documentation for filesystem kfuncs (Gregory Bell) [RHEL-33903]
  - bpf, fsverity: Add kfunc bpf_get_fsverity_digest (Gregory Bell) [RHEL-33903]
  - bpf: Add kfunc bpf_get_file_xattr (Gregory Bell) [RHEL-33903]
  - mm: hugetlb: avoid fallback for specific node allocation of 1G pages (CKI Backport Bot) [RHEL-78971]
  - Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (CKI Backport Bot) [RHEL-70421]
  - can: raw: raw_getsockopt(): reduce scope of err (Radu Rendec) [RHEL-84144]
  - can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS (Radu Rendec) [RHEL-84144]
  - can: canxl: add virtual CAN network identifier support (Radu Rendec) [RHEL-84144]
  - can: isotp: support dynamic flow control parameters (Radu Rendec) [RHEL-84144]
  - can: bcm: add recvmsg flags for own, local and remote traffic (Radu Rendec) [RHEL-84144]
  - can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior (Radu Rendec) [RHEL-84144]
  - can: dev: add can_state_get_by_berr_counter() to return the CAN state based on the current error counters (Radu Rendec) [RHEL-84144]
  - can: raw: Remove NULL check before dev_{put, hold} (Radu Rendec) [RHEL-84144]
  - can: raw: add missing refcount for memory leak fix (Radu Rendec) [RHEL-84144]
  - can: rx-offload: add can_rx_offload_get_echo_skb_queue_tail() (Radu Rendec) [RHEL-84144]
  - can: rx-offload: rename rx_offload_get_echo_skb() -> can_rx_offload_get_echo_skb_queue_timestamp() (Radu Rendec) [RHEL-84144]
  - can: raw: fix lockdep issue in raw_release() (Radu Rendec) [RHEL-84144]
  - can: raw: fix receiver memory leak (Radu Rendec) [RHEL-84144]
  - can: uapi: move CAN_RAW_FILTER_MAX definition to raw.h (Radu Rendec) [RHEL-84144]
  - can: length: refactor frame lengths definition to add size in bits (Radu Rendec) [RHEL-84144]
  - can: length: fix description of the RRS field (Radu Rendec) [RHEL-84144]
  - can: length: fix bitstuffing count (Radu Rendec) [RHEL-84144]
  - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Radu Rendec) [RHEL-84144]
  - can: j1939: change j1939_netdev_lock type to mutex (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Radu Rendec) [RHEL-84144]
  - can: length: make header self contained (Radu Rendec) [RHEL-84144]
  - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Radu Rendec) [RHEL-84144]
  - can: isotp: add module parameter for maximum pdu size (Radu Rendec) [RHEL-84144]
  - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Radu Rendec) [RHEL-84144]
  - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Radu Rendec) [RHEL-84144]
  - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Radu Rendec) [RHEL-84144]
  - can: bittiming: can_calc_bittiming(): add missing parameter to no-op function (Radu Rendec) [RHEL-84144]
  - can: raw: use temp variable instead of rolling back config (Radu Rendec) [RHEL-84144]
  - can: j1939: do not wait 250 ms if the same addr was already claimed (Radu Rendec) [RHEL-84144]
  - can: isotp: check CAN address family in isotp_bind() (Radu Rendec) [RHEL-84144]
  - can: gw: give feedback on missing CGW_FLAGS_CAN_IIF_TX_OK flag (Radu Rendec) [RHEL-84144]
  - can: raw: fix CAN FD frame transmissions over CAN XL devices (Radu Rendec) [RHEL-84144]
  - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Radu Rendec) [RHEL-84144]
  - can: raw: add support for SO_MARK (Radu Rendec) [RHEL-84144]
  - net: af_can: remove useless parameter 'err' in 'can_rx_register()' (Radu Rendec) [RHEL-84144]
  - can: sja1000: fix size of OCR_MODE_MASK define (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_send_one(): fix missing CAN header initialization (Radu Rendec) [RHEL-84144]
  - can: af_can: fix NULL pointer dereference in can_rx_register() (Radu Rendec) [RHEL-84144]
  - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_tx_eoma(): fix debug info (Radu Rendec) [RHEL-84144]
  - can: add termination resistor documentation (Radu Rendec) [RHEL-84144]
  - can: bcm: check the result of can_send() in bcm_can_tx() (Radu Rendec) [RHEL-84144]
  - can: bcm: registration process optimization in bcm_module_init() (Radu Rendec) [RHEL-84144]
  - can: raw: add CAN XL support (Radu Rendec) [RHEL-84144]
  - can: raw: use guard clause to optimize nesting in raw_rcv() (Radu Rendec) [RHEL-84144]
  - can: raw: process optimization in raw_init() (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (Radu Rendec) [RHEL-84144]
  - can: error: add definitions for the different CAN error thresholds (Radu Rendec) [RHEL-84144]
  - can: error: specify the values of data[5..7] of CAN error frames (Radu Rendec) [RHEL-84144]
  - can: bcm: use call_rcu() instead of costly synchronize_rcu() (Radu Rendec) [RHEL-84144]
  - can: Break loopback loop on loopback documentation (Radu Rendec) [RHEL-84144]
  - can: raw: add support for SO_TXTIME/SCM_TXTIME (Radu Rendec) [RHEL-84144]
  - can: raw: raw_sendmsg(): remove not needed setting of skb->sk (Radu Rendec) [RHEL-84144]
  - can: gw: use call_rcu() instead of costly synchronize_rcu() (Radu Rendec) [RHEL-84144]
  - can: isotp: convert struct tpcon::{idx,len} to unsigned int (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_can_recv(): ignore messages with invalid source address (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Radu Rendec) [RHEL-84144]
  - can: bcm: Use hrtimer_forward_now() (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (Radu Rendec) [RHEL-84144]
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Radu Rendec) [RHEL-84144]
  - can: j1939: extend UAPI to notify about RX status (Radu Rendec) [RHEL-84144]
  - can: j1939: rename J1939_ERRQUEUE_* to J1939_ERRQUEUE_TX_* (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_tx_dat(): fix typo (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_xtp_rx_dat_one(): use separate pointer for session skb control buffer (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_tx_dat(): use consistent name se_skcb for session skb control buffer (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_session_completed(): use consistent name se_skb for the session skb (Radu Rendec) [RHEL-84144]
  - can: j1939: replace fall through comment by fallthrough pseudo-keyword (Radu Rendec) [RHEL-84144]
  - can: j1939: fix checkpatch warnings (Radu Rendec) [RHEL-84144]
  - can: j1939: j1939_sk_sock_destruct(): correct a grammatical error (Radu Rendec) [RHEL-84144]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-577.el9]
changelog:
  - xfs: fix freeing speculative preallocations for preallocated files (CKI Backport Bot) [RHEL-56816]
  - i2c: i801: Add lis3lv02d for Dell Precision M6800 (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Add support for probing for the accelerometer i2c address (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Add a couple more models to lis3lv02d_devices[] (David Arcari) [RHEL-47426]
  - i2c: i801: Remove unnecessary PCI function call (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Move instantiation of lis3lv02d i2c_client from i2c-i801 to dell-lis3lv02d (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Move SMO88xx acpi_device_ids to dell-smo8800-ids.h (David Arcari) [RHEL-47426]
  - platform/x86: dell: dell-smo8800: Convert to platform remove callback returning void (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Use min_t() for comparison and assignment (David Arcari) [RHEL-47426]
  - platform/x86: dell-smo8800: Convert to be a platform driver (David Arcari) [RHEL-47426]
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (David Arcari) [RHEL-47426]
  - i2c: i801: Add support for Intel Panther Lake (David Arcari) [RHEL-47426]
  - i2c: i801: Use a different adapter-name for IDF adapters (David Arcari) [RHEL-47426]
  - i2c: i801: reword according to newest specification (David Arcari) [RHEL-47426]
  - i2c: i801: remove printout on handled timeouts (David Arcari) [RHEL-47426]
  - i2c: i801: Annotate apanel_addr as __ro_after_init (David Arcari) [RHEL-47426]
  - i2c: i801: Remove usage of I2C_CLASS_SPD (David Arcari) [RHEL-47426]
  - i2c: i801: Fix missing Kconfig dependency (David Arcari) [RHEL-47426]
  - i2c: i801: Call i2c_register_spd for muxed child segments (David Arcari) [RHEL-47426]
  - i2c: i801: Fix a refactoring that broke a touchpad on Lenovo P1 (David Arcari) [RHEL-47426]
  - i2c: i801: Avoid potential double call to gpiod_remove_lookup_table (David Arcari) [RHEL-47426]
  - i2c: i801: Fix using mux_pdev before it's set (David Arcari) [RHEL-47426]
  - i2c: i801: Add helper i801_get_block_len (David Arcari) [RHEL-47426]
  - i2c: i801: Add SMBUS_LEN_SENTINEL (David Arcari) [RHEL-47426]
  - i2c: i801: Split i801_block_transaction (David Arcari) [RHEL-47426]
  - i2c: i801: Add helper i801_check_and_clear_pec_error (David Arcari) [RHEL-47426]
  - i2c: i801: Define FEATURES_ICH5 as an extension of FEATURES_ICH4 (David Arcari) [RHEL-47426]
  - i2c: i801: Remove unused argument from tco functions (David Arcari) [RHEL-47426]
  - i2c: i801: Replace magic value with constant in dmi_check_onboard_devices (David Arcari) [RHEL-47426]
  - i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (David Arcari) [RHEL-47426]
  - i2c: i801: Add lis3lv02d for Dell Precision 3540 (David Arcari) [RHEL-47426]
  - i2c: i801: Use new helper acpi_use_parent_companion (David Arcari) [RHEL-47426]
  - ACPI: Add helper acpi_use_parent_companion (David Arcari) [RHEL-47426]
  - i2c: i801: Simplify class-based client device instantiation (David Arcari) [RHEL-47426]
  - i2c: i801: replace acpi_lock with I2C bus lock (David Arcari) [RHEL-47426]
  - i2c: i801: use i2c_mark_adapter_suspended/resumed (David Arcari) [RHEL-47426]
  - i2c: i801: simplify module boilerplate code (David Arcari) [RHEL-47426]
  - i2c: i801: add helper i801_restore_regs (David Arcari) [RHEL-47426]
  - tracing/histogram: Fix semicolon.cocci warnings (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Fix documentation inline emphasis warning (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Fix check for missing operands in an expression (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Document expression arithmetic and constants (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Optimize division by a power of 2 (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Covert expr to const if both operands are constants (Tomas Glozar) [RHEL-67679]
  - tracing/histogram: Simplify handling of .sym-offset in expressions (Tomas Glozar) [RHEL-67679]
  - tracing: Fix operator precedence for hist triggers expression (Tomas Glozar) [RHEL-67679]
  - tracing: Add division and multiplication support for hist triggers (Tomas Glozar) [RHEL-67679]
  - tracing: Add support for creating hist trigger variables from literal (Tomas Glozar) [RHEL-67679]
  - tracing: Have histogram types be constant when possible (Tomas Glozar) [RHEL-67679]
  - powercap: intel_rapl: Add support for Panther Lake platform (David Arcari) [RHEL-47408]
  - powercap: call put_device() on an error path in powercap_register_control_type() (David Arcari) [RHEL-47408]
  - ext4: fallback to complex scan if aligned scan doesn't work (Brian Foster) [RHEL-83284]
  - nfsd: adjust WARN_ON_ONCE in revoke_delegation (Olga Kornievskaia) [RHEL-74439]
  - uki: get rid of RHEL-only walinuxagentcvm module in the initramfs (Vitaly Kuznetsov) [RHEL-83003]
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CKI Backport Bot) [RHEL-82517] {CVE-2024-58077}
  - team: better TEAM_OPTION_TYPE_STRING validation (CKI Backport Bot) [RHEL-81462] {CVE-2025-21787}
  - redhat: drop Y issues from changelog (Jan Stancek)
  - Reapply "perf util: Make util its own library" (Michael Petlan) [RHEL-79032]
  - iommu/vt-d: Fix suspicious RCU usage (Jerry Snitselaar) [RHEL-70102]
  - iommu/vt-d: Remove device comparison in context_setup_pass_through_cb (Jerry Snitselaar) [RHEL-70102]
  - Revert "x86: bring back rep movsq for user access on CPUs without ERMS" (Herton R. Krzesinski) [RHEL-79780]
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75649] {CVE-2025-21663}
  - net: stmmac: Fix zero-division error when disabling tc cbs (Izabela Bakollari) [RHEL-63931] {CVE-2024-49977}
  - configs: enable FW_CACHE on centos-stream/rhel 9 for nouveau (Dave Airlie) [RHEL-79929]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [RHEL-80224]
  - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-77720]
  - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-77720]
  - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-77720]
  - scsi: qla2xxx: Fix use after free on unload (Ewan D. Milne) [RHEL-75828] {CVE-2024-56623}
  - nfsd: validate the nfsd_serv pointer before calling svc_wake_up (Olga Kornievskaia) [RHEL-69769]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-578.el9]
changelog:
  - mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs (David Arcari) [RHEL-47428]
  - mfd: intel-lpss: Switch over to MSI interrupts (David Arcari) [RHEL-47428]
  - main.c: fix initcall blacklisted (Tomas Henzl) [RHEL-83272]
  - block: change blk_mq_add_to_batch() third argument type to bool (Ming Lei) [RHEL-79409]
  - nvme: move error logging from nvme_end_req() to __nvme_end_req() (Ming Lei) [RHEL-79409]
  - block: Name the RQF flags enum (Ming Lei) [RHEL-79409]
  - block: fix conversion of GPT partition name to 7-bit (Ming Lei) [RHEL-79409]
  - Add CONFIG_SCSI_PROTO_TEST entry (Ming Lei) [RHEL-79409]
  - ext4: pass write-hint for buffered IO (Ming Lei) [RHEL-79409]
  - scsi: usb: uas: Do not query the IO Advice Hints Grouping mode page for USB/UAS devices (Ming Lei) [RHEL-79409]
  - scsi: core: Introduce the BLIST_SKIP_IO_HINTS flag (Ming Lei) [RHEL-79409]
  - scsi: sd: Only print updates to permanent stream count (Ming Lei) [RHEL-79409]
  - Add CONFIG_OF_PARTITION entry (Ming Lei) [RHEL-79409]
  - arm64: patching: avoid early page_to_phys() (Ming Lei) [RHEL-79409]
  - arm64: patching: fix handling of execmem addresses (Ming Lei) [RHEL-79409]
  - block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei) [RHEL-79409]
  - block: Remove zone write plugs when handling native zone append writes (Ming Lei) [RHEL-79409]
  - block: make segment size limit workable for > 4K PAGE_SIZE (Ming Lei) [RHEL-79409]
  - block: fix NULL pointer dereferenced within __blk_rq_map_sg (Ming Lei) [RHEL-79409]
  - block/merge: remove unnecessary min() with UINT_MAX (Ming Lei) [RHEL-79409]
  - partitions: mac: fix handling of bogus partition table (Ming Lei) [RHEL-79409]
  - block: cleanup and fix batch completion adding conditions (Ming Lei) [RHEL-79409]
  - drivers/block/sunvdc.c: update the correct AIP call (Ming Lei) [RHEL-79409]
  - block: force noio scope in blk_mq_freeze_queue (Ming Lei) [RHEL-79409]
  - block: fix nr_hw_queue update racing with disk addition/removal (Ming Lei) [RHEL-79409]
  - block: get rid of request queue ->sysfs_dir_lock (Ming Lei) [RHEL-79409]
  - loop: don't clear LO_FLAGS_PARTSCAN on LOOP_SET_STATUS{,64} (Ming Lei) [RHEL-79409]
  - blk-mq: create correct map for fallback case (Ming Lei) [RHEL-79409]
  - block: don't revert iter for -EIOCBQUEUED (Ming Lei) [RHEL-79409]
  - block: Don't trim an atomic write (Ming Lei) [RHEL-79409]
  - block: limit disk max sectors to (LLONG_MAX >> 9) (Ming Lei) [RHEL-79409]
  - block: Change blk_stack_atomic_writes_limits() unit_min check (Ming Lei) [RHEL-79409]
  - blk-mq: Move more error handling into blk_mq_submit_bio() (Ming Lei) [RHEL-79409]
  - block: Reorder the request allocation code in blk_mq_submit_bio() (Ming Lei) [RHEL-79409]
  - partitions: ldm: remove the initial kernel-doc notation (Ming Lei) [RHEL-79409]
  - blk-cgroup: rwstat: fix kernel-doc warnings in header file (Ming Lei) [RHEL-79409]
  - blk-cgroup: fix kernel-doc warnings in header file (Ming Lei) [RHEL-79409]
  - block: mark GFP_NOIO around sysfs ->store() (Ming Lei) [RHEL-79409]
  - loop: remove the use_dio field in struct loop_device (Ming Lei) [RHEL-79409]
  - loop: don't freeze the queue in loop_update_dio (Ming Lei) [RHEL-79409]
  - loop: allow loop_set_status to re-enable direct I/O (Ming Lei) [RHEL-79409]
  - loop: open code the direct I/O flag update in loop_set_dio (Ming Lei) [RHEL-79409]
  - loop: only write back pagecache when starting to to use direct I/O (Ming Lei) [RHEL-79409]
  - loop: create a lo_can_use_dio helper (Ming Lei) [RHEL-79409]
  - loop: update commands in loop_set_status still referring to transfers (Ming Lei) [RHEL-79409]
  - loop: move updating lo_flags out of loop_set_status_from_info (Ming Lei) [RHEL-79409]
  - nbd: don't allow reconnect after disconnect (Ming Lei) [RHEL-79409]
  - block: simplify tag allocation policy selection (Ming Lei) [RHEL-79409]
  - block: remove BLK_MQ_F_NO_SCHED (Ming Lei) [RHEL-79409]
  - block: remove blk_mq_init_bitmaps (Ming Lei) [RHEL-79409]
  - block: better split mq vs non-mq code in add_disk_fwnode (Ming Lei) [RHEL-79409]
  - block: add a dma mapping iterator (Ming Lei) [RHEL-79409]
  - block: use page_to_phys in bvec_phys (Ming Lei) [RHEL-79409]
  - block: remove blk_rq_bio_prep (Ming Lei) [RHEL-79409]
  - block: remove bio_add_pc_page (Ming Lei) [RHEL-79409]
  - block/blk-map: Remove set but unused variable 'added' (Ming Lei) [RHEL-79409]
  - ps3disk: Do not use dev->bounce_size before it is set (Ming Lei) [RHEL-79409]
  - block: retry call probe after request_module in blk_request_module (Ming Lei) [RHEL-79409]
  - kyber: constify sysfs attributes (Ming Lei) [RHEL-79409]
  - block, bfq: constify sysfs attributes (Ming Lei) [RHEL-79409]
  - block: mq-deadline: Constify sysfs attributes (Ming Lei) [RHEL-79409]
  - elevator: Enable const sysfs attributes (Ming Lei) [RHEL-79409]
  - blk-zoned: Split queue_zone_wplugs_show() (Ming Lei) [RHEL-79409]
  - blk-zoned: Improve the queue reference count strategy documentation (Ming Lei) [RHEL-79409]
  - blk-zoned: Document locking assumptions (Ming Lei) [RHEL-79409]
  - blk-zoned: Minimize #include directives (Ming Lei) [RHEL-79409]
  - block: remove BLK_MQ_F_SHOULD_MERGE (Ming Lei) [RHEL-79409]
  - blk-mq: remove unused queue mapping helpers (Ming Lei) [RHEL-79409]
  - virtio: blk/scsi: replace blk_mq_virtio_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - nvme: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - blk-mq: introduce blk_mq_map_hw_queues (Ming Lei) [RHEL-79409]
  - virtio: hookup irq_get_affinity callback (Ming Lei) [RHEL-79409]
  - PCI: hookup irq_get_affinity callback (Ming Lei) [RHEL-79409]
  - driver core: bus: add irq_get_affinity callback to bus_type (Ming Lei) [RHEL-79409]
  - null_blk: Remove accesses to page->index (Ming Lei) [RHEL-79409]
  - blktrace: remove redundant return at end of function (Ming Lei) [RHEL-79409]
  - block: Delete bio_prio() (Ming Lei) [RHEL-79409]
  - blktrace: move copy_[to|from]_user() out of ->debugfs_lock (Ming Lei) [RHEL-79409]
  - blktrace: don't centralize grabbing q->debugfs_mutex in blk_trace_ioctl (Ming Lei) [RHEL-79409]
  - null_blk: Add rotational feature support (Ming Lei) [RHEL-79409]
  - block: track queue dying state automatically for modeling queue freeze lockdep (Ming Lei) [RHEL-79409]
  - block: don't verify queue freeze manually in elevator_init_mq() (Ming Lei) [RHEL-79409]
  - block: track disk DEAD state automatically for modeling queue freeze lockdep (Ming Lei) [RHEL-79409]
  - block: remove unnecessary check in blk_unfreeze_check_owner() (Ming Lei) [RHEL-79409]
  - asm-generic: add an optional pfn_valid check to page_to_phys (Ming Lei) [RHEL-79409]
  - asm-generic: provide generic page_to_phys and phys_to_page implementations (Ming Lei) [RHEL-79409]
  - cdrom: Fix typo, 'devicen' to 'device' (Ming Lei) [RHEL-79409]
  - block: avoid to reuse `hctx` not removed from cpuhp callback list (Ming Lei) [RHEL-79409]
  - nvme: use blk_validate_block_size() for max LBA check (Ming Lei) [RHEL-79409]
  - block/bdev: use helper for max block size check (Ming Lei) [RHEL-79409]
  - block: Fix queue_iostats_passthrough_show() (Ming Lei) [RHEL-79409]
  - blk-mq: Clean up blk_mq_requeue_work() (Ming Lei) [RHEL-79409]
  - mq-deadline: Remove a local variable (Ming Lei) [RHEL-79409]
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Ming Lei) [RHEL-79409]
  - block: Make bio_iov_bvec_set() accept pointer to const iov_iter (Ming Lei) [RHEL-79409]
  - block: get wp_offset by bdev_offset_from_zone_start (Ming Lei) [RHEL-79409]
  - blk-mq: move cpuhp callback registering out of q->sysfs_lock (Ming Lei) [RHEL-79409]
  - blk-mq: register cpuhp callback after hctx is added to xarray table (Ming Lei) [RHEL-79409]
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei) [RHEL-79409]
  - brd: decrease the number of allocated pages which discarded (Ming Lei) [RHEL-79409]
  - block: Don't allow an atomic write be truncated in blkdev_write_iter() (Ming Lei) [RHEL-79409]
  - fs: Export generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - block: Add bdev atomic write limits helpers (Ming Lei) [RHEL-79409]
  - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - block/fs: Pass an iocb to generic_atomic_write_valid() (Ming Lei) [RHEL-79409]
  - mq-deadline: don't call req_get_ioprio from the I/O completion handler (Ming Lei) [RHEL-79409]
  - block: Remove extra part pointer NULLify in blk_rq_init() (Ming Lei) [RHEL-79409]
  - block: return bool from get_disk_ro and bdev_read_only (Ming Lei) [RHEL-79409]
  - block: remove a duplicate definition for bdev_read_only (Ming Lei) [RHEL-79409]
  - block: return bool from blk_rq_aligned (Ming Lei) [RHEL-79409]
  - block: return unsigned int from blk_lim_dma_alignment_and_pad (Ming Lei) [RHEL-79409]
  - block: return unsigned int from queue_dma_alignment (Ming Lei) [RHEL-79409]
  - block: return unsigned int from bdev_io_opt (Ming Lei) [RHEL-79409]
  - block: req->bio is always set in the merge code (Ming Lei) [RHEL-79409]
  - block: don't bother checking the data direction for merges (Ming Lei) [RHEL-79409]
  - block: blk-mq: fix uninit-value in blk_rq_prep_clone and refactor (Ming Lei) [RHEL-79409]
  - block: Add extra checks in blk_validate_atomic_write_limits() (Ming Lei) [RHEL-79409]
  - block: Drop granularity check in queue_limit_discard_alignment() (Ming Lei) [RHEL-79409]
  - block: return unsigned int from bdev_io_min (Ming Lei) [RHEL-79409]
  - blk-settings: round down io_opt to physical_block_size (Ming Lei) [RHEL-79409]
  - nvme/multipath: Fix RCU list traversal to use SRCU primitive (Ming Lei) [RHEL-79409]
  - block: make struct rq_list available for !CONFIG_BLOCK (Ming Lei) [RHEL-79409]
  - block/genhd: use seq_put_decimal_ull for diskstats decimal values (Ming Lei) [RHEL-79409]
  - block: don't reorder requests in blk_mq_add_to_batch (Ming Lei) [RHEL-79409]
  - block: don't reorder requests in blk_add_rq_to_plug (Ming Lei) [RHEL-79409]
  - block: add a rq_list type (Ming Lei) [RHEL-79409]
  - block: remove rq_list_move (Ming Lei) [RHEL-79409]
  - virtio_blk: reverse request order in virtio_queue_rqs (Ming Lei) [RHEL-79409]
  - nvme-pci: reverse request order in nvme_queue_rqs (Ming Lei) [RHEL-79409]
  - block: export blk_validate_limits (Ming Lei) [RHEL-79409]
  - block: remove the ioprio field from struct request (Ming Lei) [RHEL-79409]
  - block: remove the write_hint field from struct request (Ming Lei) [RHEL-79409]
  - scsi: sd: Translate data lifetime information (Ming Lei) [RHEL-79409]
  - scsi: scsi_proto: Add structures and constants related to I/O groups and streams (Ming Lei) [RHEL-79409]
  - scsi: core: Query the Block Limits Extension VPD page (Ming Lei) [RHEL-79409]
  - block, fs: Restore the per-bio/request data lifetime fields (Ming Lei) [RHEL-79409]
  - fs: Propagate write hints to the struct block_device inode (Ming Lei) [RHEL-79409]
  - fs: Move enum rw_hint into a new header file (Ming Lei) [RHEL-79409]
  - fs: Split fcntl_rw_hint() (Ming Lei) [RHEL-79409]
  - fs: Verify write lifetime constants at compile time (Ming Lei) [RHEL-79409]
  - fs: Fix rw_hint validation (Ming Lei) [RHEL-79409]
  - nvme-multipath: don't bother clearing max_hw_zone_append_sectors (Ming Lei) [RHEL-79409]
  - block: pre-calculate max_zone_append_sectors (Ming Lei) [RHEL-79409]
  - block: lift bio_is_zone_append to bio.h (Ming Lei) [RHEL-79409]
  - block: fix bio_split_rw_at to take zone_write_granularity into account (Ming Lei) [RHEL-79409]
  - block: take chunk_sectors into account in bio_split_write_zeroes (Ming Lei) [RHEL-79409]
  - block: Handle bio_split() errors in bio_submit_split() (Ming Lei) [RHEL-79409]
  - block: Error an attempt to split an atomic write in bio_split() (Ming Lei) [RHEL-79409]
  - block: Rework bio_split() return value (Ming Lei) [RHEL-79409]
  - s390/dasd: Fix typo in comment (Ming Lei) [RHEL-79409]
  - s390/dasd: fix redundant /proc/dasd* entries removal (Ming Lei) [RHEL-79409]
  - block: don't verify IO lock for freeze/unfreeze in elevator_init_mq() (Ming Lei) [RHEL-79409]
  - block: always verify unfreeze lock on the owner task (Ming Lei) [RHEL-79409]
  - rbd: unfreeze queue after marking disk as dead (Ming Lei) [RHEL-79409]
  - block: remove blk_freeze_queue() (Ming Lei) [RHEL-79409]
  - block: Replace sprintf() with sysfs_emit() (Ming Lei) [RHEL-79409]
  - nvme: add reservation command's defines (Ming Lei) [RHEL-79409]
  - mtip32xx: Replace deprecated PCI functions (Ming Lei) [RHEL-79409]
  - block: remove the max_zone_append_sectors check in blk_revalidate_disk_zones (Ming Lei) [RHEL-79409]
  - block: update blk_stack_limits documentation (Ming Lei) [RHEL-79409]
  - lib/iov_iter: fix bvec iterator setup (Ming Lei) [RHEL-79409]
  - block: remove bio_add_zone_append_page (Ming Lei) [RHEL-79409]
  - lib/iov_iter.c: initialize bi.bi_idx before iterating over bvec (Ming Lei) [RHEL-79409]
  - blk-integrity: remove seed for user mapped buffers (Ming Lei) [RHEL-79409]
  - block: set bip_vcnt correctly (Ming Lei) [RHEL-79409]
  - block: add a bdev_limits helper (Ming Lei) [RHEL-79409]
  - iov_iter: don't require contiguous pages in iov_iter_extract_bvec_pages (Ming Lei) [RHEL-79409]
  - block: model freeze & enter queue as lock for supporting lockdep (Ming Lei) [RHEL-79409]
  - nvme: core: switch to non_owner variant of start_freeze/unfreeze queue (Ming Lei) [RHEL-79409]
  - blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs (Ming Lei) [RHEL-79409]
  - blk-mq: Unexport blk_mq_flush_busy_ctxs() (Ming Lei) [RHEL-79409]
  - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long (Ming Lei) [RHEL-79409]
  - block: remove redundant explicit memory barrier from rq_qos waiter and waker (Ming Lei) [RHEL-79409]
  - block: flush all throttled bios when deleting the cgroup (Ming Lei) [RHEL-79409]
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Ming Lei) [RHEL-79409]
  - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding (Ming Lei) [RHEL-79409]
  - block: fix missing dispatching request when queue is started or unquiesced (Ming Lei) [RHEL-79409]
  - Revert "blk-throttle: Fix IO hang for a corner case" (Ming Lei) [RHEL-79409]
  - block: replace call_rcu by kfree_rcu for simple kmem_cache_free callback (Ming Lei) [RHEL-79409]
  - block: enable passthrough command statistics (Ming Lei) [RHEL-79409]
  - block: add partition uuid into uevent as "PARTUUID" (Ming Lei) [RHEL-79409]
  - block: move issue side time stamping to blk_account_io_start() (Ming Lei) [RHEL-79409]
  - block: set issue time stamp based on queue state (Ming Lei) [RHEL-79409]
  - block: add support for partition table defined in OF (Ming Lei) [RHEL-79409]
  - mmc: block: attach partitions fwnode if found in mmc-card (Ming Lei) [RHEL-79409]
  - block: introduce add_disk_fwnode() (Ming Lei) [RHEL-79409]
  - docs: block: Document support for read-only partition in cmdline part (Ming Lei) [RHEL-79409]
  - block: add support for defining read-only partitions (Ming Lei) [RHEL-79409]
  - block: kill blk_do_io_stat() helper (Ming Lei) [RHEL-79409]
  - block: remove 'req->part' check for stats accounting (Ming Lei) [RHEL-79409]
  - block: remove redundant passthrough check in blk_mq_need_time_stamp() (Ming Lei) [RHEL-79409]
  - block: move iostat check into blk_acount_io_start() (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_make_it_fail to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_ro_warned to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_has_subit_bio to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_write_holder into ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: move ->bd_read_only to ->__bd_flags (Ming Lei) [RHEL-79409]
  - bdev: infrastructure for flags (Ming Lei) [RHEL-79409]
  - wrapper for access to ->bd_partno (Ming Lei) [RHEL-79409]
  - Use bdev_is_paritition() instead of open-coding it (Ming Lei) [RHEL-79409]
  - nfsd: clear acl_access/acl_default after releasing them (Olga Kornievskaia) [RHEL-81523] {CVE-2025-21796}
  - vfio/pci: Fallback huge faults for unaligned pfn (Donald Dutile) [RHEL-73613]
  - vfio/pci: implement huge_fault support (Donald Dutile) [RHEL-73613]
  - vfio/pci: Remove unused struct 'vfio_pci_mmap_vma' (Donald Dutile) [RHEL-73613]
  - vfio/pci: Insert full vma on mmap'd MMIO fault (Donald Dutile) [RHEL-73613]
  - vfio/pci: Use unmap_mapping_range() (Donald Dutile) [RHEL-73613]
  - mm/arm64: support large pfn mappings (Donald Dutile) [RHEL-73613]
  - mm/x86: support large pfn mappings (Donald Dutile) [RHEL-73613]
  - mm: remove follow_pte() (Donald Dutile) [RHEL-73613]
  - mm: follow_pte() improvements (Donald Dutile) [RHEL-73613]
  - mm/access_process_vm: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - vfio: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm/x86/pat: use the new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - s390/pci_mmio: use follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - KVM: use follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm: pass VMA instead of MM to follow_pte() (Donald Dutile) [RHEL-73613]
  - mm: move follow_phys to arch/x86/mm/pat/memtype.c (Donald Dutile) [RHEL-73613]
  - mm: fix follow_pfnmap API lockdep assert (Donald Dutile) [RHEL-73613]
  - mm: new follow_pfnmap API (Donald Dutile) [RHEL-73613]
  - mm: remove follow_pfn (Donald Dutile) [RHEL-73613]
  - mm: always define pxx_pgprot() (Donald Dutile) [RHEL-73613]
  - mm/huge_memory: check pmd_special() only after pmd_present() (Donald Dutile) [RHEL-73613]
  - mm/fork: accept huge pfnmap entries (Donald Dutile) [RHEL-73613]
  - mm/pagewalk: check pfnmap for folio_walk_start() (Donald Dutile) [RHEL-73613]
  - mm/gup: detect huge pfnmap entries in gup-fast (Donald Dutile) [RHEL-73613]
  - mm: mark special bits for huge pfn mappings when inject (Donald Dutile) [RHEL-73613]
  - mm: drop is_huge_zero_pud() (Donald Dutile) [RHEL-73613]
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud (Donald Dutile) [RHEL-73613]
  - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Initialize HCR_EL2.E2H early (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Shave a few bytes from the EL2 idmap code (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2 (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix tcr_el2 initialisation in hVHE mode (Gavin Shan) [RHEL-82298]
  - KVM: arm64: vgic: Hoist SGI/PPI alloc from vgic_init() to kvm_create_vgic() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: timer: Drop warning on failed interrupt signalling (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix alignment of kvm_hyp_memcache allocations (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Simplify warning in kvm_arch_vcpu_load_fp() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: timer: Always evaluate the need for a soft timer (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix nested S2 MMU structures reallocation (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fail protected mode init if no vgic hardware is present (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Mark some header functions as inline (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Refactor exit handlers (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Add predicate for FPMR support in a VM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Flush hyp bss section after initialization of variables in bss (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix selftests after sysreg field name update (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Explicitly handle BRBE traps as UNDEFINED (Gavin Shan) [RHEL-82298]
  - KVM: arm64: vgic: Use str_enabled_disabled() in vgic_v3_probe() (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix nVHE stacktrace VA bits mask (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix FEAT_MTE in pKVM (Gavin Shan) [RHEL-82298]
  - KVM: arm64: nv: Advertise the lack of AArch32 EL0 support (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix the value of the CPTR_EL2 RES1 bitmask for nVHE (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Calculate cptr_el2 traps on activating traps (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Fix RAS trapping in pKVM for protected VMs (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Drop MDSCR_EL1_DEBUG_MASK (Gavin Shan) [RHEL-82298]
  - arm64/kvm: Avoid invalid physical addresses to signal owner updates (Gavin Shan) [RHEL-82298]
  - arm64/kvm: Configure HYP TCR.PS/DS based on host stage1 (Gavin Shan) [RHEL-82298]
  - KVM: arm64: nv: Reload PMU events upon MDCR_EL2.HPME change (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Use KVM_REQ_RELOAD_PMU to handle PMCR_EL0.E change (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Add unified helper for reprogramming counters by mask (Gavin Shan) [RHEL-82298]
  - KVM: arm64: Always check the state from hyp_ack_unshare() (Gavin Shan) [RHEL-82298]
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Jared Kangas) [RHEL-85597] {CVE-2024-58007}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Jared Kangas) [RHEL-85597]
  - soc: qcom: Add check devm_kasprintf() returned value (Jared Kangas) [RHEL-85597]
  - mm/mm_init.c: print mem_init info after defer_init is done (Eric Chanudet) [RHEL-85565]
  - x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior [partial] (David Arcari) [RHEL-85522]
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (David Arcari) [RHEL-85522]
  - intel_idle: introduce 'no_native' module parameter (David Arcari) [RHEL-85522]
  - intel_idle: clean up BYT/CHT auto demotion disable (David Arcari) [RHEL-85522]
  - intel_idle: Provide the default enter_dead() handler (David Arcari) [RHEL-85522]
  - ACPI/processor_idle: Export acpi_processor_ffh_play_dead() (David Arcari) [RHEL-85522]
  - ACPI/processor_idle: Add FFH state handling (David Arcari) [RHEL-85522]
  - x86/smp: Allow calling mwait_play_dead with an arbitrary hint (David Arcari) [RHEL-85522]
  - cpuidle: Change :enter_dead() driver callback return type to void (David Arcari) [RHEL-85522]
  - cpuidle: Do not return from cpuidle_play_dead() on callback failures (David Arcari) [RHEL-85522]
  - x86/cpu: Remove unnecessary MwAIT leaf checks (David Arcari) [RHEL-85522]
  - intel_idle: add Clearwater Forest SoC support (David Arcari) [RHEL-45063]
  - sched/stats: Print domain name in /proc/schedstat (Phil Auld) [RHEL-23495]
  - docs: Update Schedstat version to 17 (Phil Auld) [RHEL-23495]
  - sched/fair: Cleanup in migrate_degrades_locality() to improve readability (Phil Auld) [RHEL-23495]
  - sched: Report the different kinds of imbalances in /proc/schedstat (Phil Auld) [RHEL-23495]
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG (Phil Auld) [RHEL-23495]
  - sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (Phil Auld) [RHEL-23495]
  - RDMA/core: Support link status events dispatching (Kamal Heib) [RHEL-78087]
  - RDMA/core: Add ib_query_netdev_port() to query netdev port by IB device. (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_copy_path_rec_from_user (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ibdev_printk (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_find_exact_cached_pkey (Kamal Heib) [RHEL-78087]
  - RDMA/core: Remove unused ib_ud_header_unpack (Kamal Heib) [RHEL-78087]
  - RDMA/srp: Fix error handling in srp_add_port (Kamal Heib) [RHEL-78087]
  - padata: avoid UAF for reorder_work (Waiman Long) [RHEL-81522] {CVE-2025-21726}
  - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-81522]
  - padata: add pd get/put refcnt helper (Waiman Long) [RHEL-81522]
  - padata: fix sysfs store callback check (Waiman Long) [RHEL-81522]
  - padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-81522]
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-69649 RHEL-83224] {CVE-2025-21864}
  - cpufreq: intel_pstate: Avoid SMP calls to get cpu-type (David Arcari) [RHEL-85517]
  - x86/cpu: Add CPU type to struct cpuinfo_topology (David Arcari) [RHEL-85517]
  - x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Relocate platform preference check (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Make it possible to avoid enabling CAS (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Use CPUFREQ_POLICY_UNKNOWN (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Drop Arrow Lake from "scaling factor" list (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Use CPPC to get scaling factors (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Rearrange locking in hybrid_init_cpu_capacity_scaling() (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Clear hybrid_max_perf_cpu before driver registration (David Arcari) [RHEL-85517]
  - cpufreq: intel_pstate: Fix energy_performance_preference for passive (David Arcari) [RHEL-85517]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-579.el9]
changelog:
  - selftest/mm: va_high_addr_switch: add ppc64 support check (Li Wang) [RHEL-85318]
  - selftests/mm: va_high_addr_switch: reduce test noise (Li Wang) [RHEL-85318]
  - redhat: spec: fix "unexpected argument to non-parametric macro" warnings (Augusto Caringi)
  - perf test: Parse 'perf stat' Topdown events for aarch64 (Anubhav Shelat) [RHEL-78426]
  - powerpc/pseries: make max polling consistent for longer H_CALLs (Mamatha Inamdar) [RHEL-79919]
  - Fix mmu notifiers for range-based invalidates (Charles Mirabile) [RHEL-83459]
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (Jared Kangas) [RHEL-84805] {CVE-2024-58068}
  - OPP: add index check to assert to avoid buffer overflow in _read_freq() (Jared Kangas) [RHEL-81432] {CVE-2024-57998}
  - OPP: Add dev_pm_opp_find_freq_exact_indexed() (Jared Kangas) [RHEL-81432]
  - s390/diag: Move diag.c to diag specific folder (Mete Durlu) [RHEL-72676]
  - s390/diag324: Retrieve power readings via diag 0x324 (Mete Durlu) [RHEL-72676]
  - s390/diag: Create misc device /dev/diag (Mete Durlu) [RHEL-72676]
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CKI Backport Bot) [RHEL-81064] {CVE-2024-54456}
  - mei: me: add panther lake P DID (David Arcari) [RHEL-79720]
  - block: fix adding folio to bio (Gavin Shan) [RHEL-79410]
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally (David Arcari) [RHEL-53784]
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly (David Arcari) [RHEL-53784]
  - x86/itmt: Move the "sched_itmt_enabled" sysctl to debugfs (David Arcari) [RHEL-53784]
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD (David Arcari) [RHEL-53784]
  - x86/itmt: Use guard() for itmt_update_mutex (David Arcari) [RHEL-53784]
  - x86/itmt: Convert "sysctl_sched_itmt_enabled" to boolean (David Arcari) [RHEL-53784]
  - perf tools: Fix build-id event recording (Michael Petlan) [RHEL-83537]
  - powerpc/rtas: avoid scheduling in rtas_os_term() (Mamatha Inamdar) [RHEL-81040]
  - ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-29207]
  - ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-29207]
  - ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-29207]
  - ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-29207]
  - ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-29207]
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-29207]
  - ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-29207]
  - ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-29207]
  - ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-29207]
  - ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-29207]
  - ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-29207]
  - ice: Align E810T GPIO to other products (Petr Oros) [RHEL-29207]
  - ice: Add SDPs support for E825C (Petr Oros) [RHEL-29207]
  - ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-29207]
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CKI Backport Bot) [RHEL-82456] {CVE-2024-58069}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-580.el9]
changelog:
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CKI Backport Bot) [RHEL-80054] {CVE-2025-21702}
  - netfilter: nft_exthdr: fix offset with ipv4_find_option() (Florian Westphal) [RHEL-84577]
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Florian Westphal) [RHEL-84577]
  - netfilter: nf_tables: make destruction work queue pernet (Florian Westphal) [RHEL-84577]
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. (Florian Westphal) [RHEL-84577]
  - netfilter: nft_flow_offload: update tcp state flags under lock (Florian Westphal) [RHEL-84577]
  - netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpath (Florian Westphal) [RHEL-84577]
  - bonding: fix incorrect MAC address setting to receive NS messages (Hangbin Liu) [RHEL-84574]
  - bonding: report duplicate MAC address in all situations (Hangbin Liu) [RHEL-84574]
  - bonding: delete always true device check (Hangbin Liu) [RHEL-84574]
  - bonding: add ns target multicast address to slave device (Hangbin Liu) [RHEL-84574]
  - bonding: Pass string literal as format argument of alloc_ordered_workqueue() (Hangbin Liu) [RHEL-84574]
  - scsi: lpfc: Fix spelling mistake 'Toplogy' -> 'Topology' (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Copyright updates for 14.4.0.8 patches (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update lpfc version to 14.4.0.8 (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Reduce log message generation during ELS ring clean up (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Copyright updates for 14.4.0.7 patches (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update lpfc version to 14.4.0.7 (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Add support for large fw object application layer reads (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update definition of firmware configuration mbox cmds (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (Dick Kennedy) [RHEL-82146]
  - selftests: net: local_termination: require mausezahn (Hangbin Liu) [RHEL-84591]
  - selftests: forwarding: add a pvid_change test to bridge_vlan_unaware (Hangbin Liu) [RHEL-84591]
  - selftests: tls: add a selftest for wrapping rec_seq (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Test TOS matching with input routes (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add negative connect tests (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add negative match tests (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Clarify test results (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Remove unused functions (Hangbin Liu) [RHEL-84591]
  - selftests: make order checking verbose in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
  - selftests: fix OOM in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add VRF tests (Hangbin Liu) [RHEL-84591]
  - vxlan: check vxlan_vnigroup_init() return value (CKI Backport Bot) [RHEL-81516] {CVE-2025-21790}
  - media: mc: fix endpoint iteration (Kate Hsuan) [RHEL-77308]
  - media: fix secfeed undefined when filter alloc fail (Kate Hsuan) [RHEL-77308]
  - media: docs: Remove extraneous \endgroup from P010 table (Kate Hsuan) [RHEL-77308]
  - media: Fix building pdfdocs (Kate Hsuan) [RHEL-77308]
  - media: Documentation: mc: Replace deprecated graph walk API (Kate Hsuan) [RHEL-77308]
  - media: v4l2-mc: Mark v4l2_pipeline_link_notify() as deprecated (Kate Hsuan) [RHEL-77308]
  - media: videobuf2: Drop minimum allocation requirement of 2 buffers (Kate Hsuan) [RHEL-77308]
  - media: cec.h: Fix kerneldoc (Kate Hsuan) [RHEL-77308]
  - ipv6: use RCU protection in ip6_default_advmss() (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
  - net: add dev_net_rcu() helper (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
  - iomap: elide flush from partial eof zero range (Brian Foster) [RHEL-7901]
  - iomap: lift zeroed mapping handling into iomap_zero_range() (Brian Foster) [RHEL-7901]
  - iomap: reset per-iter state on non-error iter advances (Brian Foster) [RHEL-7901]
  - iomap: make zero range flush conditional on unwritten mappings (Brian Foster) [RHEL-7901]
  - iomap: fix handling of dirty folios over unwritten extents (Brian Foster) [RHEL-7901]
  - ima: Fix potential memory leak in ima_init_crypto() (CKI Backport Bot) [RHEL-80844] {CVE-2022-49627}
  - dm-crypt: Document integrity_key_size option. (Benjamin Marzinski) [RHEL-84906]
  - dm zoned: dynamically allocate the dm-zoned-meta shrinker (Benjamin Marzinski) [RHEL-84906]
  - dm: dynamically allocate the dm-bufio shrinker (Benjamin Marzinski) [RHEL-84906]
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: Do not emit journal configuration in DM table for Inline mode (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: Avoid divide by zero in table status in Inline mode (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: track tag_offset in convert_context (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: don't initialize cc_sector again (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: use bi_sector in bio when initialize integrity seed (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: fully initialize clone->bi_iter in crypt_alloc_buffer() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: set atomic as false when calling crypt_convert() in kworker (Benjamin Marzinski) [RHEL-84906]
  - dm-mirror: Support atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm-io: Warn on creating multiple atomic write bios for a region (Benjamin Marzinski) [RHEL-84906]
  - dm-stripe: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm-linear: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm: Ensure cloned bio is same length for atomic write (Benjamin Marzinski) [RHEL-84906]
  - dm-table: atomic writes support (Benjamin Marzinski) [RHEL-84906]
  - dm-transaction-manager: use red-black trees instead of linear lists (Benjamin Marzinski) [RHEL-84906]
  - dm: disable REQ_NOWAIT for flushes (Benjamin Marzinski) [RHEL-84906]
  - dm: remove useless test in alloc_multiple_bios (Benjamin Marzinski) [RHEL-84906]
  - dm: change kzalloc to kcalloc (Benjamin Marzinski) [RHEL-84906]
  - dm raid: fix spelling errors in raid_ctr() (Benjamin Marzinski) [RHEL-84906]
  - dm thin: make get_first_thin use rcu-safe list first function (Benjamin Marzinski) [RHEL-84906]
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-84906]
  - dm-verity FEC: Avoid copying RS parity bytes twice. (Benjamin Marzinski) [RHEL-84906]
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) (Benjamin Marzinski) [RHEL-84906]
  - dm array: fix cursor index when skipping across block boundaries (Benjamin Marzinski) [RHEL-84906]
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Benjamin Marzinski) [RHEL-84906]
  - dm-verity: remove the unused "data_start" variable (Benjamin Marzinski) [RHEL-84906]
  - dm-bufio: use kmalloc to allocate power-of-two sized buffers (Benjamin Marzinski) [RHEL-84906]
  - dm thin: Add missing destroy_work_on_stack() (Benjamin Marzinski) [RHEL-84906]
  - dm: add support for get_unique_id (Benjamin Marzinski) [RHEL-84906]
  - dm: Fix typo in error message (Benjamin Marzinski) [RHEL-84906]
  - dm ioctl: rate limit a couple of ioctl based error messages (Benjamin Marzinski) [RHEL-84906]
  - dm: zoned: Remove unused functions (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused dm_table_bio_based (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused dm_set_md_type (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused functions in bio-prison-v1 (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused dm_cache_size (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused dm_cache_dump (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused btracker_nr_writebacks_queued (Benjamin Marzinski) [RHEL-84906]
  - dm-cache: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
  - dm-bufio: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
  - dm verity: fallback to platform keyring also if key in trusted keyring is rejected (Benjamin Marzinski) [RHEL-84906]
  - dm: fix spelling errors (Benjamin Marzinski) [RHEL-84906]
  - dm-cache: remove pointless error check (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Use common error handling code in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Use up_read() together with key_put() only once in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: check mac_size against HASH_MAX_DIGESTSIZE in sb_mac() (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: support recalculation in the 'I' mode (Benjamin Marzinski) [RHEL-40616]
  - dm integrity: Convert comma to semicolon (Benjamin Marzinski) [RHEL-84906]
  - dm: Make use of __assign_bit() API (Benjamin Marzinski) [RHEL-84906]
  - dm integrity: Remove extra unlikely helper (Benjamin Marzinski) [RHEL-84906]
  - dm: Convert to use ERR_CAST() (Benjamin Marzinski) [RHEL-84906]
  - dm bufio: Remove NULL check of list_entry() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Allow to specify the integrity key size as option (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused declaration and empty definition "dm_zone_map_bio" (Benjamin Marzinski) [RHEL-84906]
  - dm delay: enhance kernel documentation (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused declaration dm_get_rq_mapinfo() (Benjamin Marzinski) [RHEL-84906]
  - platform/x86/intel/pmc: Remove unneeded extern keyword in header (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove unnecessary declarations in header (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Add Panther Lake support to intel_pmc_core (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Move arch specific action to init function (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Add Arrow Lake U/H support to intel_pmc_core driver (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove simple init functions (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Create generic_core_init() for all platforms (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove duplicate enum (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Make tgl_core_generic_init() static (David Arcari) [RHEL-20138]
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Davide Caratti) [RHEL-84583]
  - ipvlan: ensure network headers are in skb linear part (Davide Caratti) [RHEL-84583] {CVE-2025-21891}
  - vxlan: Fix uninit-value in vxlan_vnifilter_dump() (Guillaume Nault) [RHEL-84588]
  - redhat/configs: Enable CONFIG_PROVE_RAW_LOCK_NESTING for debug kernel (Waiman Long) [RHEL-80386]
  - locking/lockdep: Enforce PROVE_RAW_LOCK_NESTING only if ARCH_SUPPORTS_RT (Waiman Long) [RHEL-80386]
  - lockdep: Enable PROVE_RAW_LOCK_NESTING with PROVE_LOCKING. (Waiman Long) [RHEL-80386]
  - mpls: Handle error of rtnl_register_module(). (Guillaume Nault) [RHEL-85646]
  - ppp: Fix KMSAN uninit-value warning with bpf (Guillaume Nault) [RHEL-85638]
  - vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) [RHEL-45755 RHEL-85593]
  - vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-85593]
  - mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-85593]
  - vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-85593]
  - vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-85593]
  - vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-85593]
  - vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-85593]
  - vfio/pci: match IGD devices in display controller class (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Check the HBM training and C2C link status (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Alex Williamson) [RHEL-85593]
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [RHEL-85593]
  - vfio/pci: Expose setup ROM at ROM bar when needed (Alex Williamson) [RHEL-85593]
  - vfio/pci: Remove shadow ROM specific code paths (Alex Williamson) [RHEL-85593]
  - vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Alex Williamson) [RHEL-85593]
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Alex Williamson) [RHEL-85593]
  - kvm/vfio: Constify struct kvm_device_ops (Alex Williamson) [RHEL-85593]
  - vfio/qat: fix overflow check in qat_vf_resume_write() (Alex Williamson) [RHEL-85593]
  - redhat/configs: Disable CONFIG_QAT_VFIO_PCI (Alex Williamson) [RHEL-85593]
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices (Alex Williamson) [RHEL-85593]
  - redhat/configs: disable CONFIG_DRM_WERROR (Eric Chanudet) [RHEL-82507]
  - Revert "nvme_core: scan namespaces asynchronously" (John Meneghini) [RHEL-84361]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-581.el9]
changelog:
  - selftests: livepatch: handle PRINTK_CALLER in check_result() (Denis Aleksandrov) [RHEL-85303]
  - livepatch: convert timeouts to secs_to_jiffies() (Denis Aleksandrov) [RHEL-85303]
  - selftests: livepatch: add test cases of stack_order sysfs interface (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Add stack_order sysfs attribute (Denis Aleksandrov) [RHEL-85303]
  - selftests/livepatch: Replace hardcoded module name with variable in test-callbacks.sh (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Use kallsyms_on_each_match_symbol() to improve performance (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Fix build failure on 32 bits processors (Denis Aleksandrov) [RHEL-85303]
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (Rafael Aquini) [RHEL-83249 RHEL-84184] {CVE-2025-21861}
  - mm: migrate_device: use more folio in migrate_device_finalize() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: use more folio in migrate_device_unmap() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: convert try_to_migrate() to folios (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: use a folio in migrate_device_range() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: convert to migrate_device_coherent_folio() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Rafael Aquini) [RHEL-84184]
  - mm: clear uffd-wp PTE/PMD state on mremap() (Rafael Aquini) [RHEL-80529 RHEL-84184] {CVE-2025-21696}
  - userfaultfd: move userfaultfd_ctx struct to header file (Rafael Aquini) [RHEL-80529 RHEL-84184]
  - mm: remove "prot" parameter from move_pte() (Rafael Aquini) [RHEL-80529 RHEL-84184]
  - mm: open-code page_folio() in dump_page() (Rafael Aquini) [RHEL-84184]
  - mm: open-code PageTail in folio_flags() and const_folio_flags() (Rafael Aquini) [RHEL-84184]
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (Rafael Aquini) [RHEL-84184] {CVE-2025-21815}
  - mm: fix crashes from deferred split racing folio migration (Rafael Aquini) [RHEL-84184] {CVE-2024-42234}
  - mm: memcg: fix split queue list crash when large folio migration (Rafael Aquini) [RHEL-84184]
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Rafael Aquini) [RHEL-84184]
  - mm: shmem: remove unnecessary warning in shmem_writepage() (Rafael Aquini) [RHEL-84184]
  - mm/migrate: fix deadlock in migrate_pages_batch() on large folios (Rafael Aquini) [RHEL-84184]
  - mm/mglru: reset page lru tier bits when activating (Rafael Aquini) [RHEL-84184]
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma (Rafael Aquini) [RHEL-84184]
  - mm: kmemleak: fix upper boundary check for physical address objects (Rafael Aquini) [RHEL-84184]
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment (Rafael Aquini) [RHEL-84184]
  - mm, madvise: fix potential workingset node list_lru leaks (Rafael Aquini) [RHEL-84184]
  - mm: move mapping_set_update out of <linux/swap.h> (Rafael Aquini) [RHEL-84184]
  - mm/migrate: fix shmem xarray update during migration (Rafael Aquini) [RHEL-84184]
  - memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled. (Rafael Aquini) [RHEL-84184]
  - memory tiering: read last_cpupid correctly in do_huge_pmd_numa_page() (Rafael Aquini) [RHEL-84184]
  - nommu: pass NULL argument to vma_iter_prealloc() (Rafael Aquini) [RHEL-84184] {CVE-2024-53109}
  - cachestat: fix page cache statistics permission checking (Rafael Aquini) [RHEL-78989 RHEL-84184] {CVE-2025-21691}
  - kernel: be more careful about dup_mmap() failures and uprobe registering (Rafael Aquini) [RHEL-84184] {CVE-2025-21709}
  - fork: avoid inappropriate uprobe access to invalid mm (Rafael Aquini) [RHEL-84184]
  - s390/pageattr: Implement missing kernel_page_present() (Rafael Aquini) [RHEL-84184]
  - x86/mm: further clarify switch_mm_irqs_off() documentation (Rafael Aquini) [RHEL-84184]
  - x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors (Rafael Aquini) [RHEL-84184]
  - x86/kvm: Fix SEV check in sev_map_percpu_data() (Rafael Aquini) [RHEL-84184]
  - um: Fix the declaration of kasan_map_memory (Rafael Aquini) [RHEL-84184]
  - of: reserved-memory: Do not make kmemleak ignore freed address (Rafael Aquini) [RHEL-84184]
  - scripts/gdb: redefine MAX_ORDER sanely (Rafael Aquini) [RHEL-84184]
  - kasan: don't call find_vm_area() in a PREEMPT_RT kernel (Rafael Aquini) [RHEL-84184]
  - kasan: fix typo in kasan_poison_new_object documentation (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs-schemes: handle tried region directory allocation failure (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: avoid divide-by-zero during monitoring results update (Rafael Aquini) [RHEL-84184]
  - mm/damon/lru_sort: fix quota status loss due to online tunings (Rafael Aquini) [RHEL-84184]
  - mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon/reclaim: fix quota stauts loss due to online tunings (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: check error from damon_sysfs_update_target() (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: update monitoring target regions for online input commit (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: remove requested targets when online-commit inputs (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix damon_test_ops_registration() for DAMON_VADDR unset case (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: test only vaddr case on ops registration test (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix memory leak in damon_new_ctx() (Rafael Aquini) [RHEL-84184]
  - mm/damon/dbgfs-test: skip dbgfs_set_init_regions() test if PADDR is not registered (Rafael Aquini) [RHEL-84184]
  - mm/damon/dbgfs-test: skip dbgfs_set_targets() test if PADDR is not registered (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: make damon_start() waits until kdamond_fn() starts (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: use number of passed access sampling as a timer (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: fix return value from damos_wmark_metric_value (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: remove unnecessary si_meminfo invoke. (Rafael Aquini) [RHEL-84184]
  - mm/damon/ops-common: avoid divide-by-zero during region hotness calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon: implement a function for max nr_accesses safe calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h (Rafael Aquini) [RHEL-84184]
  - mm/damon/tests/dbgfs-kunit: fix the header double inclusion guarding ifdef comment (Rafael Aquini) [RHEL-84184]
  - mm/damon: fix sparse warning for zero initializer (Rafael Aquini) [RHEL-84184]
  - mm/damon/tests/vaddr-kunit: init maple tree without MT_FLAGS_LOCK_EXTERN (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix memory leak in damon_new_region() (Rafael Aquini) [RHEL-84184]
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (Rafael Aquini) [RHEL-84184]
  - ptp: Properly handle compat ioctls (Hangbin Liu) [RHEL-85028]
  - ptp: Ensure info->enable callback is always set (Hangbin Liu) [RHEL-85028] {CVE-2025-21814}
  - ptp: fix integer overflow in max_vclocks_store (Hangbin Liu) [RHEL-85028]
  - ptp: make ptp_class constant (Hangbin Liu) [RHEL-85028]
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [RHEL-33329] {CVE-2025-21926}
  - bdev: use bdev_io_min() for statx block size (Ming Lei) [RHEL-88002]
  - lib/iov_iter: fix import_iovec_ubuf iovec management (Ming Lei) [RHEL-87739]
  - iov_iter: Mark copy_iovec_from_user() noclone (Ming Lei) [RHEL-87739]
  - iov_iter: Mark copy_compat_iovec_from_user() noinline (Ming Lei) [RHEL-87739]
  - iov_iter: import single vector iovecs as ITER_UBUF (Ming Lei) [RHEL-87739]
  - iov_iter: convert import_single_range() to ITER_UBUF (Ming Lei) [RHEL-87739]
  - iov_iter: set nr_segs = 1 for ITER_UBUF (Ming Lei) [RHEL-87739]
  - redhat: Remove kernel-rt-kvm package (Wander Lairson Costa) [RHEL-76757]
  - NFS: O_DIRECT writes must check and adjust the file length (Benjamin Coddington) [RHEL-87767]
  - pnfs/flexfiles: retry getting layout segment for reads (Benjamin Coddington) [RHEL-87767]
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Benjamin Coddington) [RHEL-87767]
  - s390/diag: Add memory topology information via diag310 (Mete Durlu) [RHEL-72683]
  - net: let net.core.dev_weight always be non-zero (CKI Backport Bot) [RHEL-81686] {CVE-2025-21806}
  - sched: Fix stop_one_cpu_nowait() vs hotplug (Luis Claudio R. Goncalves) [RHEL-84526]
  - x86/tdx: Fix "in-kernel MMIO" check (Vitaly Kuznetsov) [RHEL-63318] {CVE-2024-47727}
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Desnes Nunes) [RHEL-78828 RHEL-81547] {CVE-2024-57981}
  - usb: xhci: Fix host controllers "dying" after suspend and resume (Desnes Nunes) [RHEL-78828]
  - acpi: typec: ucsi: Introduce a ->poll_cci method (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: make yoga_c630_ucsi_ops be static (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Fix deadlock during uvc_probe (Desnes Nunes) [RHEL-78828] {CVE-2024-58059}
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use (Desnes Nunes) [RHEL-78828] {CVE-2024-58079}
  - media: uvcvideo: Reorder uvc_status_init() (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Neoway N723-EA support (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MeiG Smart SRM815 (Desnes Nunes) [RHEL-78828]
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Desnes Nunes) [RHEL-78828]
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (Desnes Nunes) [RHEL-78828]
  - usb-storage: Add max sectors quirk for Nokia 208 (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Desnes Nunes) [RHEL-78828]
  - USB: core: Disable LPM only for non-suspended ports (Desnes Nunes) [RHEL-78828]
  - usb: fix reference leak in usb_new_device() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpci: fix NULL pointer issue on shared irq case (Desnes Nunes) [RHEL-78828] {CVE-2024-57914}
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() (Desnes Nunes) [RHEL-78828]
  - USB: usblp: return error when setting unsupported protocol (Desnes Nunes) [RHEL-78828]
  - usb: host: xhci-plat: set skip_phy_initialization if software node has XHCI_SKIP_PHY_INIT property (Desnes Nunes) [RHEL-78828]
  - usb: xhci: fix ring expansion regression in 6.13-rc1 (Desnes Nunes) [RHEL-78828]
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Improve redrive mode handling (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MediaTek T7XX compositions (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MeiG Smart SLM770A (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add TCL IK512 MBIM & ECM (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Don't display nvm_version unless upgrade supported (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Add support for Intel Panther Lake-M/P (Desnes Nunes) [RHEL-47432 RHEL-78828]
  - usb: typec: ucsi: Fix connector status writing past buffer size (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Fix completion notifications (Desnes Nunes) [RHEL-78828]
  - usb: misc: onboard_usb_dev: skip suspend/resume sequence for USB5744 SMBus support (Desnes Nunes) [RHEL-78828]
  - usb: core: hcd: only check primary hcd skip_phy_initialization (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: imx8mp: fix software node kernel dump (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: imx8mq-usb: correct reference to usb-switch.yaml (Desnes Nunes) [RHEL-78828]
  - usb: ehci-hcd: fix call balance of clocks handling routines (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: Add support for sink-bc12-completion-time-ms DT property (Desnes Nunes) [RHEL-78828]
  - dt-bindings: connector: Add time property for Sink BC12 detection completion (Desnes Nunes) [RHEL-78828]
  - USB: make to_usb_device_driver() use container_of_const() (Desnes Nunes) [RHEL-78828]
  - USB: make to_usb_driver() use container_of_const() (Desnes Nunes) [RHEL-78828]
  - USB: properly lock dynamic id list when showing an id (Desnes Nunes) [RHEL-78828]
  - USB: make single lock for all usb dynamic id lists (Desnes Nunes) [RHEL-78828]
  - drivers/usb/storage: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/serial: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/musb: refactor min/max with min_t/max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/mon: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/misc: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/host: refactor min/max with min_t/max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/core: refactor max with max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/gadget: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - usb: cdns3: Synchronise PCI IDs via common data base (Desnes Nunes) [RHEL-78828]
  - sub: cdns3: Use predefined PCI vendor ID constant (Desnes Nunes) [RHEL-78828]
  - sub: cdns2: Use predefined PCI vendor ID constant (Desnes Nunes) [RHEL-78828]
  - redhat/configs: Adding CONFIG_USB_CDNS2_UDC (Desnes Nunes) [RHEL-78828]
  - usb: cdns2: Add main part of Cadence USBHS driver (Desnes Nunes) [RHEL-78828]
  - usb: cdns2: Device side header file for CDNS2 driver (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: core: Set force_gen1 bit for all applicable SuperSpeed ports (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: gadget: Refine the logic for resizing Tx FIFOs (Desnes Nunes) [RHEL-78828]
  - USB: core: remove dead code in do_proc_bulk() (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: imx: add imx8ulp support (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Fix a missing bits to bytes conversion in ucsi_init() (Desnes Nunes) [RHEL-78828]
  - USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Replace deprecated PCI functions (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Convert connector specific commands to bitmaps (Desnes Nunes) [RHEL-78828]
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Desnes Nunes) [RHEL-78828]
  - USB: serial: pl2303: account for deficits of clones (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Limit Stop Endpoint retries (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove irrelevant comment (Desnes Nunes) [RHEL-78828]
  - usb: xhci: add help function xhci_dequeue_td() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: refactor xhci_td_cleanup() to return void (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove unused arguments from td_to_noop() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: improve xhci_clear_command_ring() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: request MSI/-X according to requested amount (Desnes Nunes) [RHEL-78828]
  - usb: xhci: move link TRB quirk to xhci_gen_setup() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: simplify TDs start and end naming scheme in struct 'xhci_td' (Desnes Nunes) [RHEL-78828]
  - xhci: pci: Fix indentation in the PCI device ID definitions (Desnes Nunes) [RHEL-78828]
  - xhci: pci: Use standard pattern for device IDs (Desnes Nunes) [RHEL-78828]
  - xhci: Don't perform Soft Retry for Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Fix control transfer error on Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Don't issue Reset Device command to Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Combine two if statements for Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - usb: xhci: add xhci_initialize_ring_segments() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: rework xhci_link_segments() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: refactor xhci_link_rings() to use source and destination rings (Desnes Nunes) [RHEL-78828]
  - usb: xhci: rework xhci_free_segments_for_ring() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: adjust xhci_alloc_segments_for_ring() arguments (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove option to change a default ring's TRB cycle bit (Desnes Nunes) [RHEL-78828]
  - usb: xhci: introduce macro for ring segment list iteration (Desnes Nunes) [RHEL-78828]
  - xhci: debugfs: Add virt endpoint state to xhci debugfs (Desnes Nunes) [RHEL-78828]
  - xhci: trace stream context at Set TR Deq command completion (Desnes Nunes) [RHEL-78828]
  - xhci: add stream context tracing (Desnes Nunes) [RHEL-78828]
  - xhci: Don't trace ring at every enqueue or dequeue increase (Desnes Nunes) [RHEL-78828]
  - xhci: show DMA address of TRB when tracing TRBs (Desnes Nunes) [RHEL-78828]
  - xhci: Cleanup Candence controller PCI device and vendor ID usage (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Fix sum_trb_lengths() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Remove unused parameters of next_trb() (Desnes Nunes) [RHEL-78828]
  - xhci: Add Isochronous TRB fields to TRB tracer (Desnes Nunes) [RHEL-78828]
  - phy: tegra: xusb: Set fwnode for xusb port devices (Desnes Nunes) [RHEL-78828]
  - usb: Use (of|device)_property_present() for non-boolean properties (Desnes Nunes) [RHEL-78828]
  - misc: rtsx: Cleanup on DRV_NAME cardreader variables (Desnes Nunes) [RHEL-78828]
  - usb: use "prompt" instead of "bool" for choice prompts (Desnes Nunes) [RHEL-78828]
  - redhat/configs: Adding CONFIG_TYPEC_MUX_TUSB1046 (Desnes Nunes) [RHEL-78828]
  - usb: typec: mux: Add support for the TUSB1046 crosspoint switch (Desnes Nunes) [RHEL-78828]
  - MAINTAINERS: Drop myself as maintainer of TYPEC port controller drivers (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: Describe TUSB1046 crosspoint switch (Desnes Nunes) [RHEL-78828]
  - USB: xhci: add support for PWRON active high (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: add TUSB73x0 PCIe (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Implement asymmetric lane margining (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Don't hardcode margining results size (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Refactor hardware margining result parsing (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Replace margining lane numbers with an enum (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Replace "both lanes" with "all lanes" (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Implement Gen 4 margining eye selection (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Add USB4 Gen 4 margining capabilities (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Don't hardcode margining capabilities size (Desnes Nunes) [RHEL-78828]
  - usb: core: use sysfs_emit() instead of sprintf() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: Add support for parsing time dt properties (Desnes Nunes) [RHEL-78828]
  - dt-bindings: connector: Add properties to define time values (Desnes Nunes) [RHEL-78828]
  - usb: storage: fix wrong comments for struct bulk_cb_wrap (Desnes Nunes) [RHEL-78828]
  - usb: storage: use US_BULK_FLAG_OUT instead of constant values (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Helper for Get Connector Status command (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Remove some deadcode (Desnes Nunes) [RHEL-78828]
  - media: usb: drop vb2_ops_wait_prepare/finish (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Stop stream during unregister (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: mxs-usb-phy: add imx8qxp compatible (Desnes Nunes) [RHEL-78828]
  - xhci: add helper to stop endpoint and wait for completion (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Add support for the partner USB Modes (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: ucsi: Supply the USB capabilities to the ports (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: Add attribute file showing the USB Modes of the partner (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: Add attribute file showing the supported USB modes of the port (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: require FMODE_WRITE for usbdev_mmap() (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: UCSI2.0 Set Sink Path command support (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Do not call ACPI _DSM method for UCSI read operations (Desnes Nunes) [RHEL-78828]
  - memstick: Fix typo in comment (Desnes Nunes) [RHEL-78828]
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Fix the S-Video capture on August VGB100 (Desnes Nunes) [RHEL-78828]
  - media: pvrusb2: Use kmemdup_array instead of kmemdup for multiple allocation (Desnes Nunes) [RHEL-78828]
  - media: pwc: set lock before calling vb2_queue_init() (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Exit early if there is not int_urb (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Avoid race condition during unregister (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Refactor the status irq API (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Require entities to have a non-zero unique ID (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033 (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add support for the D3DFMT_R5G6B5 pixmap type (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: RealSense D421 Depth module metadata (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add luma 16-bit interlaced pixel format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add luma 16-bit interlaced pixel format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add V4L2-PIX-FMT-Y14P format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add V4L2-PIX-FMT-Y12P format (Desnes Nunes) [RHEL-78828]
  - media: Add Y012 video format (Desnes Nunes) [RHEL-78828]
  - media: uapi: Add IPU3 packed Y10 format (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: dwc3-imx8mp: add compatible string for imx95 (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: imx8mq-usb: add compatible "fsl,imx95-usb-phy" (Desnes Nunes) [RHEL-78828]
  - USB: chaoskey: fail open after removal (Desnes Nunes) [RHEL-78828]
  - usb: yurex: make waiting on yurex_write interruptible (Desnes Nunes) [RHEL-78828]
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: improve error recovery for ISO transfer (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: Add revision check of 2.20[CI_REVISION_22] (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: improve dTD link logic (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: create bounce buffer for problem sglist entries if possible (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: limit usb request length to max 16KB (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: cypress,cypd4226: Drop Tegra specific GPIO defines (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: genesys,gl850g: allow downstream device subnodes (Desnes Nunes) [RHEL-78828]
  - usb: typec: stusb160x: Make use of i2c_get_match_data() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: use max() to get higher value (Desnes Nunes) [RHEL-78828]
  - usb: atm: Correct some typos (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: Correct some typos in comments (Desnes Nunes) [RHEL-78828]
  - usb: typec: Fix typo in comment (Desnes Nunes) [RHEL-78828]
  - usb: host: fix typo in the comment (Desnes Nunes) [RHEL-78828]
  - staging: octeon-usb: move driver out of staging (Desnes Nunes) [RHEL-78828]
  - ipc/sem: use flexible array in 'struct sem_undo' (Rafael Aquini) [RHEL-83456]
  - mqueue: convert to ctime accessor functions (Rafael Aquini) [RHEL-83456]
  - ipc,namespace: batch free ipc_namespace structures (Rafael Aquini) [RHEL-83456]
  - ipc,namespace: make ipc namespace allocation wait for pending free (Rafael Aquini) [RHEL-83456]
  - ipc/sem: Fix dangling sem_array access in semtimedop race (Rafael Aquini) [RHEL-83456]
  - ipc: mqueue: remove unnecessary conditionals (Rafael Aquini) [RHEL-83456]
  - ipc/util.c: cleanup and improve sysvipc_find_ipc() (Rafael Aquini) [RHEL-83456]
  - ipc/mqueue: remove unnecessary (void*) conversion (Rafael Aquini) [RHEL-83456]
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns (Rafael Aquini) [RHEL-83456] {CVE-2024-53175}
  - ipc: Free mq_sysctls if ipc namespace creation failed (Rafael Aquini) [RHEL-83456]
  - ipc: update semtimedop() to use hrtimer (Rafael Aquini) [RHEL-83456]
  - ipc/sem: remove redundant assignments (Rafael Aquini) [RHEL-83456]
  - ipc/sem: do not sleep with a spin lock held (Rafael Aquini) [RHEL-83456]
  - shm: extend forced shm destroy to support objects from several IPC nses (Rafael Aquini) [RHEL-83456]
  - ipc: WARN if trying to remove ipc object which is absent (Rafael Aquini) [RHEL-83456]
  - ARM: 9114/1: oabi-compat: rework sys_semtimedop emulation (Rafael Aquini) [RHEL-83456]
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CKI Backport Bot) [RHEL-81457] {CVE-2025-21738}
  - platform/x86/intel/vsec: Add Diamond Rapids support (David Arcari) [RHEL-47412]
  - platform/x86/intel/vsec: Add support for Panther Lake (David Arcari) [RHEL-47412]
  - platform/x86/intel/vsec: Remove a useless mutex (David Arcari) [RHEL-47412]
  - cgroup/cpuset: Add warnings to catch inconsistency in exclusive CPUs (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Add a remote partition transition test to test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Clean up and restructure test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Update test_cpuset_prs.sh to use | as effective CPUs and state separator (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Code cleanup and comment update (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Remove remote_partition_check() & make update_cpumasks_hier() handle remote partition (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix race between newly created partition and dying one (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix spelling errors in file kernel/cgroup/cpuset.c (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Make test_cpuset_prs.sh deal with pre-isolated CPUs (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Account for boot time isolated CPUs (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove use_parent_ecpus of cpuset (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove fetch_xcpus (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Add new test cases to test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove child_ecpus_count (Waiman Long) [RHEL-83455]
  - cpuset: use Union-Find to optimize the merging of cpumasks (Waiman Long) [RHEL-83455]
  - Union-Find: add a new module in kernel library (Waiman Long) [RHEL-83455]
  - scsi: core: Clear driver private data when retrying request (Ewan D. Milne) [RHEL-86156]
  - scsi: core: Do not retry I/Os during depopulation (Ewan D. Milne) [RHEL-86156]
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency (Ewan D. Milne) [RHEL-86156]
  - scsi: transport: sas: spi: Fix kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_scan: Add kernel-doc for exported function (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_lib: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_ioctl: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_error: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Skip host/bus reset settle delay (Ewan D. Milne) [RHEL-86156]
  - scsi: Eliminate scsi_register() and scsi_unregister() usage & docs (Ewan D. Milne) [RHEL-86156]
  - scsi: docs: Remove init_this_scsi_driver() (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Fix hrtimer support for ndelay (Ewan D. Milne) [RHEL-86156]
  - scsi: bsg: Replace zero-length array with flexible array member (Ewan D. Milne) [RHEL-86156]
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_transport_fc: Allow setting rport state to current state (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Maintain write statistics per group number (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Implement GET STREAM STATUS (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Implement the IO Advice Hints Grouping mode page (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Allocate the MODE SENSE response from the heap (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Rework subpage code error handling (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Rework page code error handling (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Support the block limits extension VPD page (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Reduce code duplication (Ewan D. Milne) [RHEL-86156]
  - treewide: Switch/rename to timer_delete[_sync]() (Tony Camuso) [RHEL-82121]
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (Tony Camuso) [RHEL-82121]
  - ipmi: make ipmi_destroy_user() return void (Tony Camuso) [RHEL-82121]
  - char:ipmi: Fix a not-used variable on a non-ACPI system (Tony Camuso) [RHEL-82121]
  - char:ipmi: Fix the wrong format specifier (Tony Camuso) [RHEL-82121]
  - [tree-wide] finally take no_llseek out (Tony Camuso) [RHEL-82121]
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Tony Camuso) [RHEL-82121]
  - ipmi:ssif: Improve detecting during probing (Tony Camuso) [RHEL-82121]
  - ipmi: ipmi_ssif: fix module autoloading (Tony Camuso) [RHEL-82121]
  - RDMA/efa: Align interrupt related fields to same type (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Reset device on probe failure (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Report link speed according to device attributes (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Add option to set QP service level on create (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Update device interface (Kamal Heib) [RHEL-83223]
  - rtla/tests: Test setting default options (Tomas Glozar) [RHEL-86051]
  - rtla/tests: Reset osnoise options before check (Tomas Glozar) [RHEL-86051]
  - rtla: Always set all tracer options (Tomas Glozar) [RHEL-86051]
  - rtla/osnoise: Set OSNOISE_WORKLOAD to true (Tomas Glozar) [RHEL-86051]
  - rtla: Unify apply_config between top and hist (Tomas Glozar) [RHEL-86051]
  - rtla/osnoise: Unify params struct (Tomas Glozar) [RHEL-86051]
  - redhat/kernel.spec.template: Build rtla with BPF sample collection (Tomas Glozar) [RHEL-77358]
  - tools/build: Use SYSTEM_BPFTOOL for system bpftool (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Test BPF mode (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_top: Use BPF to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_top: Move divisor to update (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_hist: Use BPF to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Add BPF skeleton to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla: Add optional dependency on BPF tooling (Tomas Glozar) [RHEL-77358]
  - tools/build: Add bpftool-skeletons feature test (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Unify params struct (Tomas Glozar) [RHEL-77358]
  - trace/osnoise: Add trace events for samples (Tomas Glozar) [RHEL-77358]
  - tools/rtla: Add basic test suite (Tomas Glozar) [RHEL-77358]
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CKI Backport Bot) [RHEL-82701] {CVE-2025-21839}
  - watch_queue: fix pipe accounting mismatch (Carlos Maiolino) [RHEL-78249]
  - smb: client: don't retry IO on failed negprotos with soft mounts (Paulo Alcantara) [RHEL-79765]
  - tools/rv: Keep user LDFLAGS in build (Tomas Glozar) [RHEL-82810]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-582.el9]
changelog:
  - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-88093]
  - docs: move x86 documentation into Documentation/arch/ (Waiman Long) [RHEL-68940]
  - x86: Add missing code to arch/x86/include/asm/linkage.h (Waiman Long) [RHEL-68940]
  - jump_label: Fix static_key_slow_dec() yet again (Waiman Long) [RHEL-68940]
  - jump_label: Fix the fix, brown paper bags galore (Waiman Long) [RHEL-68940]
  - jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() (Waiman Long) [RHEL-68940]
  - jump_label: Clarify condition in static_key_fast_inc_not_disabled() (Waiman Long) [RHEL-68940]
  - jump_label: Fix concurrency issues in static_key_slow_dec() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use the correct length when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sort local vars in apply_alternatives() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Optimize optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Get rid of __optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use a temporary buffer when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Catch late X86_FEATURE modifiers (Waiman Long) [RHEL-68940]
  - x86/percpu: Use __force to cast from __percpu address space (Waiman Long) [RHEL-68940]
  - x86/percpu: Unify arch_raw_cpu_ptr() defines (Waiman Long) [RHEL-68940]
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys (Waiman Long) [RHEL-68940]
  - x86/bpf: Fix IP for relocating call depth accounting (Waiman Long) [RHEL-68940]
  - x86/alternatives: Move apply_relocation() out of init section (Waiman Long) [RHEL-68940]
  - x86/percpu: Avoid sparse warning with cast to named address space (Waiman Long) [RHEL-68940]
  - x86/traps: Use current_top_of_stack() helper in traps.c (Waiman Long) [RHEL-68940]
  - x86/percpu: Fix "const_pcpu_hot" version generation failure (Waiman Long) [RHEL-68940]
  - x86/callthunks: Correct calculation of dest address in is_callthunk() (Waiman Long) [RHEL-68940]
  - x86/smp: Use atomic_try_cmpxchg in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/smp: Move the call to smp_processor_id() after the early exit in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/percpu: Declare const_pcpu_hot as extern const variable (Waiman Long) [RHEL-68940]
  - x86/paravirt: Remove no longer needed paravirt patching code (Waiman Long) [RHEL-68940]
  - x86/callthunks: Mark apply_relocation() as __init_or_module (Waiman Long) [RHEL-68940]
  - x86/callthunks: Fix and unify call thunks assembly snippets (Waiman Long) [RHEL-68940]
  - x86/callthunks: Handle %rip-relative relocations in call thunk template (Waiman Long) [RHEL-68940]
  - x86/percpu: Define PER_CPU_VAR macro also for !__ASSEMBLY__ (Waiman Long) [RHEL-68940]
  - x86/percpu: Return correct variable from current_top_of_stack() (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce const-qualified const_pcpu_hot to micro-optimize code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce %rip-relative addressing to PER_CPU_VAR() (Waiman Long) [RHEL-68940]
  - x86/percpu, xen: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/percpu: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/fpu: Clean up FPU switching in the middle of task switching (Waiman Long) [RHEL-68940]
  - x86/percpu: Use the correct asm operand modifier in percpu_stable_op() (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for arch_raw_cpu_ptr(), to improve code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Rewrite arch_raw_cpu_ptr() to be easier for compilers to optimize (Waiman Long) [RHEL-68940]
  - x86/percpu: Disable named address spaces for KASAN (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for percpu read/write accessors (Waiman Long) [RHEL-68940]
  - x86/percpu: Use compiler segment prefix qualifier (Waiman Long) [RHEL-68940]
  - x86/percpu: Enable named address spaces with known compiler version (Waiman Long) [RHEL-68940]
  - x86/callthunks: Use EXPORT_PER_CPU_SYMBOL_GPL() for per CPU variables (Waiman Long) [RHEL-68940]
  - x86/paravirt: Make BUG_func() usable by non-GPL modules (Waiman Long) [RHEL-68940]
  - x86/alternative: Correct feature bit debug output (Waiman Long) [RHEL-68940]
  - x86/paravirt: Switch mixed paravirt/alternative calls to alternatives (Waiman Long) [RHEL-68940]
  - x86/alternative: Add indirect call patching (Waiman Long) [RHEL-68940]
  - x86/paravirt: Move some functions and defines to alternative.c (Waiman Long) [RHEL-68940]
  - x86/paravirt: Introduce ALT_NOT_XEN (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sync core before enabling interrupts (Waiman Long) [RHEL-68940]
  - arch: Remove cmpxchg_double (Waiman Long) [RHEL-68940]
  - x86,intel_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - x86,amd_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - locking/atomic: Correct (cmp)xchg() instrumentation (Waiman Long) [RHEL-68940]
  - arm64: cmpxchg_double*: hazard against entire exchange variable (Waiman Long) [RHEL-68940]
  - jump_label: Prevent key->enabled int overflow (Waiman Long) [RHEL-68940]
  - jump_label: Use atomic_try_cmpxchg() in static_key_slow_inc_cpuslocked() (Waiman Long) [RHEL-68940]
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault) [RHEL-57031]
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Hangbin Liu) [RHEL-84573]
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Hangbin Liu) [RHEL-84573] {CVE-2025-22005}
  - net: ipv6: fix dst ref loop on input in seg6 lwt (Hangbin Liu) [RHEL-84573]
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Hangbin Liu) [RHEL-84573] {CVE-2025-21768}
  - inet: ipmr: fix data-races (Hangbin Liu) [RHEL-84573]
  - perf script: Fix hangup in offline flamegraph report (Anubhav Shelat) [RHEL-87957]
  - perf script: force stdin for flamegraph in live mode (Anubhav Shelat) [RHEL-87957]
  - locking/lockdep: Add kasan_check_byte() check in lock_acquire() (Waiman Long) [RHEL-81997]
  - locking/lockdep: Disable KASAN instrumentation of lockdep.c (Waiman Long) [RHEL-81997]
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix driver sending truncated data (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Fix Add Device to responding before completing (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_sync: Fix not setting Random Address when required (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix circular lock in iso_conn_big_sync (Bastien Nocera) [RHEL-74483] {CVE-2024-54191}
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix recursive locking warning (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Improve setsockopt() handling of malformed user input (Bastien Nocera) [RHEL-74483]
  - net: Make copy_safe_from_sockptr() match documentation (Bastien Nocera) [RHEL-74483]
  - net: add copy_safe_from_sockptr() helper (Bastien Nocera) [RHEL-74483]
  - net/tcp: Introduce TCP_AO setsockopt()s [partial] (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: remove the redundant sco_conn_put (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Add initial implementation of MGMT_OP_HCI_CMD_SYNC (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_bcm: Use the devm_clk_get_optional() helper (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Send BIG Create Sync via hci_sync (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Remove alloc from critical section (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: HCI: Add IPC(11) bus type (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add 3 HWIDs for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Fix matching parent socket for BIS slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btrtl: Decrease HCI_OP_RESET timeout from 10 s to 2 s (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btintel_pcie: Replace deprecated PCI functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Set quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Support new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Add new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_qca: use devm_clk_get_optional_enabled_with_rate() (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtksdio: Lookup device node only as fallback (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Add GPIO support to power save feature (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Bastien Nocera) [RHEL-74483]
  - bluetooth: Fix typos in the comments (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Rename IW615 to IW610 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Drop _v0 suffix from FW names (Bastien Nocera) [RHEL-74483]
  - Bluetooth: add HAS_IOPORT dependencies (Bastien Nocera) [RHEL-74483]
  - perf annotate: Return errors from disasm_line__parse_powerpc() (Jakub Brnak) [RHEL-83785]
  - perf annotate: Add annotation_options.disassembler_used (Jakub Brnak) [RHEL-83785]
  - perf annotate: Use an array for the disassembler preference (Jakub Brnak) [RHEL-83785]
  - perf disasm: Allow configuring what disassemblers to use (Jakub Brnak) [RHEL-83785]
  - perf disasm: Define stubs for the LLVM and capstone disassemblers (Jakub Brnak) [RHEL-83785]
  - perf disasm: Introduce symbol__disassemble_objdump() (Jakub Brnak) [RHEL-83785]
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Paolo Abeni) [RHEL-87474]
  - net: Clear old fragment checksum value in napi_reuse_skb (Paolo Abeni) [RHEL-87474]
  - neighbour: use RCU protection in __neigh_notify() (Paolo Abeni) [RHEL-87474]
  - iomap: add a workaround for racy i_size updates on block devices (CKI Backport Bot) [RHEL-79099]
  - selftests: netfilter: add test case for recent mismatch bug (CKI Backport Bot) [RHEL-87163]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (CKI Backport Bot) [RHEL-87163]
  - sctp: detect and prevent references to a freed transport in sendmsg (Xin Long) [RHEL-84590]
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Xin Long) [RHEL-84590]
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - scsi: fnic: Remove unnecessary NUL-terminations (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant flush_workqueue() calls (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace fnic->lock_flags with local flags (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace use of sizeof with standard usage (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary debug print (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Test for memory allocation failure and return error code (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code for mem alloc failure (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix use of uninitialized value in debug message (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Delete incorrect debugfs error handling (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove extern definition from .c files (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support to handle port channel RSCN (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Code cleanup (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add stats and related functionality (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify fnic interfaces to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify IO path to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add functionality in fnic to support FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FDMI (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add Cisco hardware model names (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for unsolicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for target based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for fabric based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add headers and definitions for FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vcalloc() instead of vmalloc() and memset(0) (Karan Kumar) [RHEL-64440]
  - scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move flush_work initialization out of if block (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Convert snprintf() to sysfs_emit() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: unlock on error path in fnic_queuecommand() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Improve logs and add support for multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic driver (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove usage of host_lock (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Define stats to track multiqueue (MQ) IOs (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify ISRs to support multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor and redefine fnic.h for multiqueue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Get copy workqueue count and interrupt mode from config (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Rename wq_copy to hw_copy_wq (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and improve log messages (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and use fnic number (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify definitions to sync with VIC firmware (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return error if vmalloc() failed (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix sg_reset success path (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace sgreset tag with max_tag_id (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vmalloc_array() and vcalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vzalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace DMA mask of 64 bits with 47 bits (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unneeded flush_workqueue() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant NULL check (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Stop using the SCSI pointer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix a tracing statement (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Call scsi_done() directly (Karan Kumar) [RHEL-64440]
  - tools/power turbostat: v2025.05.06 (David Arcari) [RHEL-86839]
  - tools/power turbostat: disable "cpuidle" invocation counters, by default (David Arcari) [RHEL-86839]
  - tools/power turbostat: re-factor sysfs code (David Arcari) [RHEL-86839]
  - tools/power turbostat: Restore GFX sysfs fflush() call (David Arcari) [RHEL-86839]
  - tools/power turbostat: Document GNR UncMHz domain convention (David Arcari) [RHEL-86839]
  - tools/power turbostat: report CoreThr per measurement interval (David Arcari) [RHEL-86839]
  - tools/power turbostat: Increase CPU_SUBSET_MAXCPUS to 8192 (David Arcari) [RHEL-86839]
  - tools/power turbostat: Add idle governor statistics reporting (David Arcari) [RHEL-86839]
  - tools/power turbostat: Fix names matching (David Arcari) [RHEL-86839]
  - tools/power turbostat: Allow Zero return value for some RAPL registers (David Arcari) [RHEL-86839]
  - tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (David Arcari) [RHEL-86839]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (David Arcari) [RHEL-45087]
  - platform/x86: intel: Use *-y instead of *-objs in Makefile (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Update documentation with image download path (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Fix SBAF title underline length (David Arcari) [RHEL-45087]
  - trace: platform/x86/intel/ifs: Add SBAF trace support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test image loading support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Refactor MSR usage in IFS test code (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Initialize union ifs_status to zero (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Disable irq during one load stage (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Classify error scenarios correctly (David Arcari) [RHEL-45087]
  - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - RDMA/mlx5: Fix implicit ODP use after free (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - redhat: remove kernel-ipaclones-internal package (Joe Lawrence) [RHEL-86518]
  - net: decrease cached dst counters in dst_release (Antoine Tenart) [RHEL-83031]
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-86674]
  - RDMA/bnxt_re: Remove unusable nq variable (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix budget handling of notification queue (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support perf management counters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix allocation of QP table (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the statistics for Gen P7 VF (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix issue in the unload path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add sanity checks on rdev validity (Sreekanth Reddy) [RHEL-72652 RHEL-76569 RHEL-80075]
  - RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Allocate dev_attr information dynamically (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Pass the context for ulp_irq_stop (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Query firmware defaults of CC params during probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add Async event handling support (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add ULP call to notify async events (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove deliver net device event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add send queue size check for variable wqe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary header file inclusion (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Eliminate need for some forward declarations (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Use the default mode of congestion control (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support different traffic class (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Cache MSIx info to a local structure (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for CQ rx coalescing (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refactor NQ allocation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fail probe early when not enough MSI-x vectors are reserved (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add set_func_resources support for P5/P7 adapters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for optimized modify QP (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add support for RoCE sriov configuration (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add debugfs hook in the driver (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support raw data query for each resources (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for querying HW contexts (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support driver specific data collection using rdma tool (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix access flags for MR and QP modify (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for modify_device hook (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Marcin Juszkiewicz) [RHEL-83075]
  - igb: Fix potential invalid memory access in igb_init_module() (CKI Backport Bot) [RHEL-73651] {CVE-2024-52332}
  - perf vendor events: Update Tigerlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update SkylakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Skylake metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sierraforest events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Rocketlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Meteorlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Lunarlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update IcelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Icelake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update HaswellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Haswell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Graniterapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update GrandRidge events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update EmeraldRapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Clearwaterforest events (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update CascadelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellDE events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Broadwell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Arrowlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update AlderlakeN events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Alderlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sapphirerapids events/metrics (Michael Petlan) [RHEL-21925]
  - nfsd: fix UAF when access ex_uuid or ex_stats (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - nfsd: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: introduce cache_check_rcu to help check in rcu context (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - Enable X86_USER_SHADOW_STACK (Štěpán Horáček) [RHEL-15599]
  - mm: don't try THP alignment for FS without get_unmapped_area (Štěpán Horáček) [RHEL-15599]
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Štěpán Horáček) [RHEL-15599]
  - mm: care about shadow stack guard gap when getting an unmapped area (Štěpán Horáček) [RHEL-15599]
  - mm: pass vm_flags to generic_get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: make arch_get_unmapped_area() take vm_flags by default (Štěpán Horáček) [RHEL-15599]
  - x86/mm: care about shadow stack guard gap during placement (Štěpán Horáček) [RHEL-15599]
  - x86/mm: implement HAVE_ARCH_UNMAPPED_AREA_VMFLAGS (Štěpán Horáček) [RHEL-15599]
  - mm: take placement mappings gap into account (Štěpán Horáček) [RHEL-15599]
  - treewide: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - powerpc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - parisc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - csky: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - thp: add thp_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: use get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: remove export for get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: introduce arch_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: switch mm->get_unmapped_area() to a flag (Štěpán Horáček) [RHEL-15599]
  - proc: refactor pde_get_unmapped_area as prep (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: add placement guard gap test for shstk (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Enable shadow stacks for x32 (Štěpán Horáček) [RHEL-15599]
  - arch: Reserve map_shadow_stack() syscall number for all architectures (Štěpán Horáček) [RHEL-15599]
  - mm: thp_get_unmapped_area must honour topdown preference (Štěpán Horáček) [RHEL-15599]
  - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE (Štěpán Horáček) [RHEL-15599]
  - mm: align larger anonymous mappings on THP boundaries (Štěpán Horáček) [RHEL-15599]
  - alpha: Fix up new futex syscall numbers (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add warning for shadow stack double unmap (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: Update map_shadow_stack syscall nr (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Change order of __user in type (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Don't retry vm_munmap() on -EINTR (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_STATUS (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_UNLOCK (Štěpán Horáček) [RHEL-15599]
  - crypto: ccp - Fix uAPI definitions of PSP errors (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for PCI device 0x1134 (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix check for the primary ASP device (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add external API interface for PSP module initialization (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Use scoped guard for mutex (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - do not request interrupt on cmd completion when irqs disabled (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Remove unused declaration sp_get_master() (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add additional information about an SEV firmware upgrade (Vladis Dronov) [RHEL-85131]
  - KVM: SEV: uapi: fix typo in SEV_RET_INVALID_CONFIG (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add the SNP_VLEK_LOAD command (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move message about TSME being enabled later in init (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for getting security attributes on some older systems (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - align psp_platform_access_msg (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move security attributes to their own file (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Represent capabilities register as a union (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - drop platform ifdef checks (Vladis Dronov) [RHEL-85131]
  - crypto: tools/ccp - Remove unused variable (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Update return values for some unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix some unfused tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix sample application signature passing (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix DBC sample application error handling (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix ioctl unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add Mario to MAINTAINERS (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add unit tests for dynamic boost control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample python script for Dynamic Boost Control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample library for ioctl use (Vladis Dronov) [RHEL-85131]
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CKI Backport Bot) [RHEL-83191] {CVE-2025-21847}
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long) [RHEL-69423]
  - firmware: arm_scpi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scpi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-65607]
  - arm64: Use SYSTEM_OFF2 PSCI call to power off for hibernate (Steve Dunnagan) [RHEL-65607]
  - firmware/psci: Add definitions for PSCI v1.3 specification (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Report duplicate opps as firmware bugs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Skip opp duplicates (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() implementations (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use vendor string in max-rx-timeout-ms (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Reject clear channel request on A2P (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Queue in scmi layer for mailbox implementation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Give SMC transport precedence over mailbox (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (Steve Dunnagan) [RHEL-65607]
  - redhat/configs: Add SCMI configs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX MISC protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX BBM protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add NXP i.MX95 SCMI documentation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace comma with the semicolon (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace the use of of_node_put() to __free(device_node) (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix trivial whitespace/coding style issues (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max-rx-timeout-ms from devicetree (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove const from transport descriptors (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Simplify with scoped for each OF child loop (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Update various protocols versions (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove legacy transport-layer code (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make VirtIO transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make OPTEE transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make SMC transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make MBOX transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for standalone transport drivers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce packet handling helpers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce setup_shmem_iomap (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in OPTEE transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix voltage description in failure cases (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support to reset the debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Create debugfs files for SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Track basic SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for debug metrics at the interface (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove superfluous handle_to_scmi_info (Steve Dunnagan) [RHEL-65607]
  - firmware/smccc: Call arch-specific hook on discovering KVM services (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for platform to agent channel completion (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for system suspend in power control driver (Steve Dunnagan) [RHEL-65607]
  - firmware: smccc: Export revision soc_id function (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Avoid non-constant printk format strings (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use dev_err_probe to bail out (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix struct kernel-doc warnings in optee transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make scmi_bus_type const (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add multiple protocols registration support (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace asm-generic/bug.h with linux/bug.h (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - pmdomain: arm_scmi: Move Kconfig options to the pmdomain subsystem (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-583.el9]
changelog:
  - Revert "io_uring/uring_cmd: defer SQE copying until it's needed" (Jeff Moyer) [RHEL-82695] {CVE-2025-21837}
  - s390/dasd: Remove DMA alignment (Mete Durlu) [RHEL-88820]
  - ALSA: update RHEL kconfigs for 6.13 upstream code (Jaroslav Kysela) [RHEL-80681]
  - ASoC: use playback_only/capture_only instead dpcm_playback/dpcm_capture flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tegra: Fix ADX S24_LE audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: simple-card-utils: fix priv->dai_props indexing (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/realtek: Fix volume adjustment issue on Lenovo ThinkBook 16P Gen5 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l43: Add codec force suspend/resume ops (Jaroslav Kysela) [RHEL-80681]
  - ALSA: doc: Add codecs/index.rst to top-level index (Jaroslav Kysela) [RHEL-80681]
  - ALSA: doc: cs35l56: Add information about Cirrus Logic CS35L54/56/57 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: samsung: Add missing selects for MFD_WM8994 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: es8316: Fix HW rate calculation for 48Mhz MCLK (Jaroslav Kysela) [RHEL-80681]
  - ASoC: wm8994: Add depends on MFD core (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas2781: Fix occasional calibration failture (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Adjust ANA_MICBIAS to reduce pop noise (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: fix remaining descriptor races in sound/core/compress_offload.c (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Drop unneeded no_free_ptr() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Ignore SUBSYS_ID not found for tas2563 projects (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: improve file descriptors installation for dma-buf (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: use safe list iteration in snd_compr_task_seq() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: import DMA_BUF namespace (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: avoid 64-bit get_user() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: wcd937x: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Fix error code tas2781_read_acpi() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Show the codec quirk info at probing (Jaroslav Kysela) [RHEL-80681]
  - ALSA: asihpi: Remove unused variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Add speaker id check for ASUS projects (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: dapm: Add location information for dapm-graph tool (Jaroslav Kysela) [RHEL-80681]
  - ASoC: apple: Fix the wrong format specifier (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: fix dead hyperlink to Intel HD-Audio spec (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ac97: bus: Fix the mistake in the comment (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: Fix build dependencies for `SND_SOC_AMD_PS` (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Poll jack events for LS7A HD-Audio (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ump: Fix the wrong format specifier (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: stm32: dfsdm: change rate upper limits (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: fix uninitialized variable refence (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: simple-mux: add idle-state property (Jaroslav Kysela) [RHEL-80681]
  - ASoc: simple-mux: add idle-state support (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Minor formatting fixups in sdw.h header (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Update the includes on the sdw.h header (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdca: test adev before calling acpi_dev_for_each_child (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: fix the pcm device numbering for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add soundwire machine driver for legacy stack (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: move get_acp63_cpu_pin_id() to common file (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: add soundwire machines for acp6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add RT711, RT714 & RT1316 support for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add rt722 based soundwire machines (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Add missing descriptions in structs (Jaroslav Kysela) [RHEL-80681]
  - ALSA: pcm: Define snd_pcm_mmap_data_{open|close}() locally (Jaroslav Kysela) [RHEL-80681]
  - ALSA: tidyup SNDRV_PCM_TRIGGER_xxx numbering (Jaroslav Kysela) [RHEL-80681]
  - ASoC: simple-card-utils: care simple_util_dai for dummy DAI (Jaroslav Kysela) [RHEL-80681]
  - ASoC: test-component: Support continuous rates for test component (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Add headphone mixer switch (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Add left/right DAC volume control (Jaroslav Kysela) [RHEL-80681]
  - ASoc: SOF: ipc4-pcm: fix uninit-value in sof_ipc4_pcm_dai_link_fixup_rate (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Remove duplicate DACs (Jaroslav Kysela) [RHEL-80681]
  - ASoC: machine: update documentation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sm8250: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ump: remove unnecessary check on blk (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: Revert make SND_SOC_ACPI_INTEL_MATCH depend on ACPI (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: Only select SND_SOC_SDCA if ACPI is enabled (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: Fix invalid logical judgement (Jaroslav Kysela) [RHEL-80681]
  - ASoC: ux500: Remove redundant casts (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: handle only paused streams in hda_dai_suspend() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: Add support for persistent Code Loader DMA buffers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda-stream: Always use at least two BDLE for transfers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc3-loader: 'Handle' PROBE_INFO ext_manifest type when parsing (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ext_manifest: Add missing ext_manifest type for PROBE_INFO (Jaroslav Kysela) [RHEL-80681]
  - ASoC: da7213: Extend support for the MCK in range [2, 50] MHz (Jaroslav Kysela) [RHEL-80681]
  - ASoC: da7213: Avoid setting PLL when closing audio stream (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: Add driver for Iron Device SMA1307 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: irondevice,sma1307: Add initial DT (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: select SND_SOC_SDCA by SND_SOC_ACPI_INTEL_SDCA_QUIRKS (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: make SND_SOC_ACPI_INTEL_MATCH depend on ACPI (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Use runtime pointer in snd_compr_poll() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: change interrupt mask from XU to GE (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt722: change the interrupt mask for jack type detection (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sc8280xp Add SM8750 sound card (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: qcom,sm8250: Add SM8750 sound card (Jaroslav Kysela) [RHEL-80681]
  - ASoC: bcm63xx-pcm-whistler: fix uninit-value in i2s_dma_isr (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: x1e80100: Support boards with two speakers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Reduce pop noise (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: Fix for ACP SOF dmic tplg component load failure (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Fix unused variable warning (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: intel: Switch to pci_alloc_irq_vectors API (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: intel: Don't free interrupt when suspending (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cleanup function parameter for rtd and its id (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-core: do rtd->id trick at snd_soc_add_pcm_runtime() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: generic: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sh: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: meson: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rename rtd->num to rtd->id (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add aw88081 amplifier driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add schema for "awinic,aw88081" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: Update stream_name in dai_links structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils/intel/amd: refactor dai link init logic (Jaroslav Kysela) [RHEL-80681]
  - mfd: cs42l43: Disable IRQs during suspend (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: update clock api details (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: wcd937x: Remove unused of_gpio.h (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Remove unused including <linux/version.h> (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: add powerdown gpio (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: drop patform_data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: document the adau1373 Codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: add some kconfig text (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: remove incorrect of_match_ptr() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: Add toctree index entry for co-processor acceleration API (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: compress-accel: Format state machine flowchart as code block (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Modify the configuration of and micbias (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-devres: Remove unused devm_snd_soc_register_dai (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: add mic function (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: introduce accel operation mode (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: leverage ring sense IRQs to correctly detect headsets (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Add new codec driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: fix rt_sdca_index_update_bits function parameter description (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: support allwinner H616 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: Add playback only flag to quirks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: Add support for different DAC FIFOC addresses to quirks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: fix error code in ntp8835_i2c_probe() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-pcm: merge DPCM and non-DPCM validation check (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-pcm: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-topology: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel: boards: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-compress: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-core: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: samsung: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sof: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: core: Add fw, tplg and ipc type override parameters (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: sof-of-dev: add parameter to override tplg/fw_filename (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: core: Add debug module parameters to set IPC and boot timeout (Jaroslav Kysela) [RHEL-80681]
  - ASoC: uniphier: Handle regmap_write errors in aio_iecout_set_enable() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl_xcvr: reset RX dpath after wrong preamble (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl_xcvr: enable interrupt of cmdc status update (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tegra: Add support for S24_LE audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1372: add match table (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-utils: Remove PAGE_SIZE compile-time constant assumption (Jaroslav Kysela) [RHEL-80681]
  - ASoC: nau8821: check regmap_raw_read/regmap_raw_write for failure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: Add stream name to ACP PDM DMIC devices (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rx651: Use card->dev in replace of the &pdev->dev argument in the dev_err function (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: use machine_check() for SoundWire (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi: add is_device_rt712_vb() helper (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: add SmartMic DAI for RT713 VB (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: add SmartMic DAI for RT712 VB (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt712-sdca: detect the SMART_MIC function during the probe stage (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-acpi: introduce new 'machine check' callback (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: add quirk function for RT712_VB match (Jaroslav Kysela) [RHEL-80681]
  - soundwire: slave: lookup SDCA version and functions (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: add initial module (Jaroslav Kysela) [RHEL-80681]
  - ASoC/soundwire: remove sdw_slave_extended_id (Jaroslav Kysela) [RHEL-80681]
  - soundwire: sdw_intel: include linux/acpi.h (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Remove unneeded semicolon (Jaroslav Kysela) [RHEL-80681]
  - ASoC: makes snd_soc_set_runtime_hwparams() inline (Jaroslav Kysela) [RHEL-80681]
  - mfd: cs42l43: Fix issues in probe error paths (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: Enhance switch case to prevent uninitialized variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Fix all stream interrupts definition (Jaroslav Kysela) [RHEL-80681]
  - ASoC/SoundWire: Intel: lnl: enable interrupts after first power-up/before last power-down (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda-mlink: expose unlocked interrupt enable routine (Jaroslav Kysela) [RHEL-80681]
  - ASoC: imx-card: Add CS42888 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: imx-card: Set mclk for codec (Jaroslav Kysela) [RHEL-80681]
  - ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (Jaroslav Kysela) [RHEL-80681]
  - ALSA: firewire: Remove unused cmp_connection_update (Jaroslav Kysela) [RHEL-80681]
  - soundwire: cadence: add soft-reset on startup (Jaroslav Kysela) [RHEL-80681]
  - soundwire: cadence: clear MCP BLOCK_WAKEUP in init (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Clean logically deadcode in rt721-sdca.c (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sm8250: correct typo in shutdown function name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Add rt721-sdca support for PTL platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Add helper function to print the module's in/out audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Concentrate prints inside of sof_ipc4_init_output_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Use local variables in sof_ipc4_init_output_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Simplify code to deal with process modules without output (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Simplify match format print in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Remove redundant check in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Use local variables in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Drop the 'index' from 'Pin index' of format print (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Fix issue of warning message (Jaroslav Kysela) [RHEL-80681]
  - ALSA: aica: Remove unused variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: dbri: Fix formatting issue in dbri.c (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Fix mixed declarations and code warning (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Return ENOSPC for out-of-bounds flash writes (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Simplify linked channel handling (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Add support for device map retrieval (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Fix redeclaration of loop variable (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Add RT721 SDCA driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: Common functions for Realtek soundwire driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add rt721 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel/sdw_utils: refactor RT multifunction sdca speaker codecs (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: fsl_qmc_audio: Remove the logging when parsing channels (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tlv320adc3xxx: Fix unsigned int compared against 0 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: uniphier: Handle regmap_write errors in aio_src_set_param() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: sof_rt5682: Add support for ptl_max98360a_rt5682 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sh: rz-ssi: Use SSIFCR_FIFO_RST macro (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add support for DP0/DPn 'lane-list' property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi_disco: add support for clock-scales property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add error handling for property array read (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add support for peripheral channelprepare timeout (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add new properties from 2.0 spec (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add comment on DP0-supported property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: remove DPn audio-modes (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi_disco: add MIPI-specific property_read_bool() helpers (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_stream_runtime memory layout (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_master_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_bus structure (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_slave_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_dp0_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_dpn_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Correct some typos in comments (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: amd: pass acp_rev as soundwire resource data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: pass acp pci revision id as soundwire resource data (Jaroslav Kysela) [RHEL-80681]
  - soundwire: amd: pass acp pci revision id as resource data (Jaroslav Kysela) [RHEL-80681]
  - soundwire: amd: refactor existing code for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: wcd9335: remove unnecessary MODULE_ALIAS() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: drop bogus NULL check from i2s_irq_handler (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: fix the range of patch code address (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: aw88399: Fix spelling mistake "unsupport" -> "unsupported" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: Use maple tree register cache (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas5805m: Improve a size determination in tas5805m_i2c_probe() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: bcm2835-i2s: Use maple tree register cache (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: reads patch code from firmware file (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: aw88395: Fix spelling mistake "unsupport" -> "unsupported" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas2781: Fix redundant parameter assignment (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc3: Use standard dev_dbg API (Jaroslav Kysela) [RHEL-80681]
  - ASoC: constify snd_soc_component_driver struct (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: remove unused variable from acp platform driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: replace adata->platform conditional check (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: remove unused variable from acp_card_drvdata structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: update mach_params subsystem_rev field (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: pass acp pci revision id as platform data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: store acp pci rev id in platform driver private structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: use acp pci revision id for platform differntiation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: use acp_rev for platform specific conditional checks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: simplify platform conditional checks code (Jaroslav Kysela) [RHEL-80681]
  - ASoC: stm: fix macro definition on STM_SAI_HAS_EXT_SYNC (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_dai_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_link_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_component_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: improve macro definition on TWL4030_OUTPUT_PGA (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: mchp-spdiftx: Remove interface name from stream_name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: mchp-spdifrx: Remove interface name from stream_name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: atmel_ssc_dai: Drop S24_LE support due to single channel limitation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: atmel_ssc_dai: Add stream names (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity NTP8835 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add NeoFidelity NTP8835 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add NeoFidelity NTP8918 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity NTP8918 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity Firmware helpers (Jaroslav Kysela) [RHEL-80681]
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Jaroslav Kysela) [RHEL-80681]
  - loop: Fix use-after-free issues (Ming Lei) [RHEL-87488]
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage (Ming Lei) [RHEL-81398] {CVE-2025-21745}
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-80794]
  - treewide: Switch/rename to timer_delete[_sync]() (Kamal Heib) [RHEL-83218]
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (Kamal Heib) [RHEL-83218]
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Kamal Heib) [RHEL-83218]
  - RDMA/cxgb4: Dump vendor specific QP details (Kamal Heib) [RHEL-83218]
  - xfrm: Fix the usage of skb->sk (Sabrina Dubroca) [RHEL-84576]
  - xfrm: delete intermediate secpath entry in packet offload mode (Sabrina Dubroca) [RHEL-84576]
  - xfrm: state: fix out-of-bounds read during lookup (Sabrina Dubroca) [RHEL-84576]
  - configs: add redhat/configs/common/generic/CONFIG_OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - redhat: make ENABLE_WERROR enable also OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - objtool: Add CONFIG_OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - objtool: Create backup on error and print args (Joe Lawrence) [RHEL-85302]
  - objtool: Change "warning:" to "error:" for --Werror (Joe Lawrence) [RHEL-85302]
  - objtool: Add --Werror option (Joe Lawrence) [RHEL-85302]
  - objtool: Use O_CREAT with explicit mode mask (Joe Lawrence) [RHEL-85302]
  - objtool: Add --output option (Joe Lawrence) [RHEL-85302]
  - objtool: Fix error handling inconsistencies in check() (Joe Lawrence) [RHEL-85302]
  - x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior [partial 2] (Joe Lawrence) [RHEL-85302]
  - virtgpu: don't reset on shutdown (Eric Auger) [RHEL-331]
  - virtio: break and reset virtio devices on device_shutdown() (Eric Auger) [RHEL-331]
  - efi: pstore: Return proper errors on UEFI failures (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Request at most 512 bytes for variable names (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Allow dynamic initialization based on module parameter (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Add module parameter for setting the record size (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Omit efivars caching EFI varstore access layer (Lenny Szubowicz) [RHEL-2564]
  - efi: vars: Add thin wrapper around EFI get/set variable interface (Lenny Szubowicz) [RHEL-2564]
  - efi: vars: Don't drop lock in the middle of efivar_init() (Lenny Szubowicz) [RHEL-2564]
  - pstore: Add priv field to pstore_record for backend specific use (Lenny Szubowicz) [RHEL-2564]
  - selftests/sgx: Fix an enclave built with extended instructions (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Fix size overflows in sgx_encl_create() (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Use vmalloc_array() instead of vmalloc() (Vladis Dronov) [RHEL-86442]
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88830]
  - ALSA: hda/tas2781: Fix index issue in tas2781 hda SPI driver (CKI Backport Bot) [RHEL-81726]
  - ALSA: hda/tas2781: Update tas2781 hda SPI driver (CKI Backport Bot) [RHEL-81726]
  - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Benjamin Coddington) [RHEL-87724]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-584.el9]
changelog:
  - net: warn if NAPI instance wasn't shut down (Davide Caratti) [RHEL-77816]
  - net: hide the definition of dev_get_by_napi_id() (Davide Caratti) [RHEL-77816]
  - net: page_pool: don't try to stash the napi id (Davide Caratti) [RHEL-77816]
  - xsk: Bring back busy polling support (Davide Caratti) [RHEL-77816]
  - net: Make napi_hash_lock irq safe (Davide Caratti) [RHEL-77816]
  - netdev: prevent accessing NAPI instances from another namespace (Davide Caratti) [RHEL-77816] {CVE-2025-21659}
  - netdev-genl: Hold rcu_read_lock in napi_set (Davide Caratti) [RHEL-77816]
  - mlx4: Add support for persistent NAPI config to RX CQs (Davide Caratti) [RHEL-77816]
  - mlx5: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - bnxt: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Support setting per-NAPI config values (Davide Caratti) [RHEL-77816]
  - net: napi: Add napi_config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump gro_flush_timeout (Davide Caratti) [RHEL-77816]
  - net: napi: Make gro_flush_timeout per-NAPI (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump napi_defer_hard_irqs (Davide Caratti) [RHEL-77816]
  - net: napi: Make napi_defer_hard_irqs per-NAPI (Davide Caratti) [RHEL-77816]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-88224]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-88224]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-88224]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-88224]
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Waiman Long) [RHEL-88224]
  - x86/bugs: Skip RSB fill at VMEXIT (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Waiman Long) [RHEL-88224]
  - x86/bugs: Fix handling when SRSO mitigation is disabled (Waiman Long) [RHEL-88224]
  - x86/bugs: Add missing NO_SSB flag (Waiman Long) [RHEL-88224]
  - Documentation/srso: Document a method for checking safe RET operates properly (Waiman Long) [RHEL-88224]
  - redhat/configs: Add new CONFIG_MITIGATION_* kconfig files (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for GDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Remove GDS Force Kconfig option (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SSB (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre V2 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SRBDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre v1 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for RETBLEED (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for L1TF (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MMIO Stable Data (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for TAA (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MDS (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Flip the /proc/cpuinfo appearance logic (Waiman Long) [RHEL-88224]
  - x86/bugs: Add 'spectre_bhi=vmexit' cmdline option (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/cpu: Use EXPORT_PER_CPU_SYMBOL_GPL() for x86_spec_ctrl_current (Waiman Long) [RHEL-88224]
  - linux/dim: Fix divide by 0 in RDMA DIM (CKI Backport Bot) [RHEL-80826] {CVE-2022-49670}
  - scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Make most module parameters static (Chandrakanth Patil) [RHEL-80700]
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-88421]
  - ibmvnic: Don't reference skb after sending to VIOS (Mamatha Inamdar) [RHEL-83359] {CVE-2025-21855}
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (CKI Backport Bot) [RHEL-88783] {CVE-2025-22056}
  - iommu/amd: Fix header file (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Fix possible circular locking dependency (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add the document for Intel IOMMU debugfs (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Fix NULL vs IS_ERR() check in probe() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix a spelling error (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/hyper-v: Don't assume cpu_possible_mask is dense (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Jerry Snitselaar) [RHEL-78705]
  - iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Jerry Snitselaar) [RHEL-78708]
  - iommufd/selftest: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78708]
  - iommu/amd: Fully decode all combinations of alloc_paging_flags (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move the nid to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove dev == NULL checks (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommu_domain_update() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: remove return value of amd_iommu_detect (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove amd_iommu_apply_erratum_63() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify clear_dte_entry() to avoid in-place update (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function get_dte256() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function to update 256-bit DTE (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Misc ACPI IVRS debug info clean up (Jerry Snitselaar) [RHEL-75906]
  - iommu/vt-d: Link cache tags of same iommu unit together (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove iommu cap audit (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Jerry Snitselaar) [RHEL-78704]
  - iommu: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-78704]
  - lib/string_choices: Add some comments to make more clear for string choices helpers. (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Introduce several opposite string choice helpers (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_true_false()/str_false_true() helper (Jerry Snitselaar) [RHEL-78705]
  - string_choices: Add wrapper for str_down_up() (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_up_down() helper (Jerry Snitselaar) [RHEL-78705]
  - iommu: Remove the remove_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78705]
  - iommu: Detaching pasid by attaching to the blocked_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Jerry Snitselaar) [RHEL-78704]
  - iommu: Prevent pasid attach if no ops->remove_dev_pasid (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add way to debug pgtable walk (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Make pgtable walker more generic (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add support for PRR bit setup (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Jerry Snitselaar) [RHEL-78705]
  - redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Re-enable context caching in smmu reset operation (Jerry Snitselaar) [RHEL-78705]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Jerry Snitselaar) [RHEL-78705]
  - arm64: add stubs for system_supports_poe and system_supports_gcs (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Log better event records (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Jerry Snitselaar) [RHEL-78705]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid draining PRQ in sva mm release path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add lockdep asserts for domain->dev_list (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-78705]
  - iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Fix typos in kernel-doc comments (Jerry Snitselaar) [RHEL-78708]
  - iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add ops->domain_alloc_nested() (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix a typo (Jerry Snitselaar) [RHEL-78704]
  - kmemleak: iommu/iova: fix transient kmemleak false positive (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make set_dev_pasid op support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Add set_dev_pasid callback for nested domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add iommu_domain_did() to get did (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add pasid replace helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor the pasid setup helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Jerry Snitselaar) [RHEL-78704]
  - iommu: Pass old domain to set_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drain PRQs when domain removed from RID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop pasid requirement for prq initialization (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Jerry Snitselaar) [RHEL-78708]
  - iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove the pasid present check in prq_event_thread (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Separate page request queue from SVM (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop s1_pgtbl from dmar_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused dmar_msi_read (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Increase buffer size for device name (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Use PCI_DEVID() macro (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor first_level_by_default() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_superpage() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_cap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Enhance compatibility check for paging domain attach (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused domain_alloc callback (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add domain_alloc_paging support (Jerry Snitselaar) [RHEL-78704]
  - iommu/iova: Fix typo 'adderss' (Jerry Snitselaar) [RHEL-78704]
  - iommu: Create __iommu_alloc_identity_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Improve amd_iommu_release_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add ops->release_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reorder attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Rearrange attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reduce domain lock scope in attach device path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not detach devices in domain free path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommus variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: xarray to track protection_domain->iommu list (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove protection_domain.dev_cnt variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use ida interface to manage protection domain ID (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Fix corruption when mapping large pages from 0 (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not try copy old DTE resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Implement global identity domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Enhance amd_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Separate page table setup from domain allocation (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add helper function to check GIOSUP/GTSUP (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Jerry Snitselaar) [RHEL-78705]
  - iommu: Add new flag to explictly request PASID capable domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Introduce iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Refactor __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - remoteproc: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - gpu: host1x: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Restore iommu_flush_iotlb_all() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove useless flush from iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-78704]
  - iommu/sysfs: constify the class struct (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_present() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Reorganize kerneldoc parameter names (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make bus_iommu_probe() static (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add a kdoc to iommu_unmap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/io-pgtable-arm: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add self test for the last page in the IAS (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-55204]
  - iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Jerry Snitselaar) [RHEL-78708]
  - selftests: iommu: Use installed kernel headers search path (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Lock all IOAS objects (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Export do_update_pinned (Jerry Snitselaar) [RHEL-78708]
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Jerry Snitselaar) [RHEL-55204]
  - redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Jerry Snitselaar) [RHEL-55204]
  - ACPI/IORT: Support CANWBS memory access flag (Jerry Snitselaar) [RHEL-55204]
  - ACPICA: IORT: Update for revision E.f (Jerry Snitselaar) [RHEL-55204]
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update vDEVICE (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add mock_viommu_cache_invalidate (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add iommufd_viommu_find_dev helper (Jerry Snitselaar) [RHEL-73590]
  - iommu: Add iommu_copy_struct_from_full_user_array helper (Jerry Snitselaar) [RHEL-73590]
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-73590]
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Jerry Snitselaar) [RHEL-73590]
  - Documentation: userspace-api: iommufd: Update vIOMMU (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add refcount to mock_iommu_device (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add container_of helpers (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-55217]
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Verify object in iommufd_object_finalize/abort() (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move _iommufd_object_alloc helper to a sharable file (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move struct iommufd_object to public iommufd header (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow fault reporting for non-PRI PCI devices (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: File mappings for mdev (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader for file mappings (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Folio subroutines (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader local variables (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Generalize iopt_pages address (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Rename uptr in iopt_alloc_iova() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: Add folio_add_pins() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: handle NULL pages in unpin_user_pages() (Jerry Snitselaar) [RHEL-78708] {CVE-2024-56612}
  - mm/gup: avoid an unnecessary allocation call for FOLL_LONGTERM cases (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: stop leaking pinned pages in low memory conditions (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: simplify refs in memfd_alloc_folio (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: fix memfd_pin_folios alloc race panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49872}
  - mm/gup: fix memfd_pin_folios hugetlb page allocation (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios free_huge_pages leak (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49964}
  - mm/filemap: fix filemap_get_folios_contig THP panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49873}
  - mm/gup: introduce memfd_pin_folios() for pinning memfd folios (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce check_and_migrate_movable_folios() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce unpin_folio/unpin_folios helpers (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Jerry Snitselaar) [RHEL-78708]
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: drop unneeded includes from dma-mapping.h (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace more error paths (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace dma_alloc/free direction (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use macros to define events in a class (Jerry Snitselaar) [RHEL-78704]
  - redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: remove DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Jerry Snitselaar) [RHEL-78708]
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix a possible deadlock on radix_lock (Jerry Snitselaar) [RHEL-78704] {CVE-2024-47143}
  - docs/core-api: swiotlb: fix typos (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu: Clarify MMU-500 CPRE workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Cleanup apic_printk() (Jerry Snitselaar) [RHEL-78704]
  - x86/apic: Provide apic_printk() helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu: Manage driver probe deferral better (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Clean up more on probe failure (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Retire probe deferral workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Make instance lookup robust (Jerry Snitselaar) [RHEL-78705]
  - kselftest/arm64: signal: drop now redundant GNU_SOURCE definition (Jerry Snitselaar) [RHEL-78704]
  - selftests: mptcp: extend CFLAGS to keep options from environment (Jerry Snitselaar) [RHEL-78704]
  - selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mk (Jerry Snitselaar) [RHEL-78704]
  - of: address: always use dma_default_coherent for default coherency (Jerry Snitselaar) [RHEL-78704]
  - of: also handle dma-noncoherent in of_dma_is_coherent() (Jerry Snitselaar) [RHEL-78704]
  - virtio/vsock: Fix accept_queue memory leak (Jon Maloy) [RHEL-69713] {CVE-2024-53119}
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Xin Long) [RHEL-77314] {CVE-2025-21647}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86841] {CVE-2025-21993}
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-76845]
  - page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-76845]
  - media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-85049]
  - media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-85049]
  - mm/gup: Refuse VM_PFNMAP in follow_page() (Donald Dutile) [RHEL-87404]
  - net: tun: unlink NAPI from device on destruction (CKI Backport Bot) [RHEL-80840] {CVE-2022-49672}
  - ata: libata-scsi: Improve CDL control (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Tomas Henzl) [RHEL-72596]
  - ata: libata-sata: Save all fields from sense data descriptor (Tomas Henzl) [RHEL-72596]
  - ata: libata: Fix NCQ Non-Data log not supported print (Tomas Henzl) [RHEL-72596]
  - ata: libata: Improve return value of atapi_check_dma() (Tomas Henzl) [RHEL-72596]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Tomas Henzl) [RHEL-72596]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Tomas Henzl) [RHEL-72596]
  - ata: sata_gemini: Remove unused gemini_sata_reset_bridge() (Tomas Henzl) [RHEL-72596]
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Tomas Henzl) [RHEL-72596]
  - ata: Constify struct pci_device_id (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Document all VPD page inquiry actors (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsiop_maint_in() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsi_simulate() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor scsi_6_lba_len() with use of get_unaligned_be24() (Tomas Henzl) [RHEL-72596]
  - ata: Fix typos in the comment (Tomas Henzl) [RHEL-72596]
  - net: fib_rules: Fix iif / oif matching on L3 master device (Antoine Tenart) [RHEL-84584]
  - net: fib_rules: annotate data-races around rule->[io]ifindex (Antoine Tenart) [RHEL-84584]
  - net: Remove likely from l3mdev_master_ifindex_by_index (Antoine Tenart) [RHEL-84584]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-585.el9]
changelog:
  - dmaengine: amd: qdma: Remove using the private get and set dma_ops APIs (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Revert "dmaengine: qcom: bam_dma: Avoid writing unavailable register" (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Enable Function Level Reset (FLR) for halt (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Refactor halt handler (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_device_config_save() and idxd_device_config_restore() helpers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Binding and unbinding IDXD device and driver (Jerry Snitselaar) [RHEL-78706]
  - bitmap: Define a cleanup function for bitmaps (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_pci_probe_alloc() helper (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: gpi: Add GPI immediate DMA support for SPI protocol (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: bcm2835-dma: Prevent suspend if DMA channel is busy (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: k3-udma: Add support for J722S CSI BCDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: make the loop condition simpler in edma_probe() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: bam_dma: Avoid writing unavailable register (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove unused idxd_(un)register_bus_type (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add a new IAA device ID on Panther Lake family platforms (Jerry Snitselaar) [RHEL-47414]
  - dmaengine: sh: rcar-dmac: add comment for r8a779a0 compatible (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Move AMD PTDMA driver to amd directory (Jerry Snitselaar) [RHEL-78706]
  - redhat/configs: Add CONFIG_AMD_QDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: amd: qdma: Add AMD QDMA driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove a useless mutex (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: fix typo in the comment (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Move DSA/IAA device IDs to IDXD driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Clean up headers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Simplify devm_acpi_dma_controller_register() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Drop unused devm_acpi_dma_controller_free() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: rz-dmac: add r7s72100 support (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Make RZ_DMAC depend on ARCH_RZG2L (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Add ARCH_R9A07G054 dependency for RZ_DMAC config option (Jerry Snitselaar) [RHEL-78706]
  - nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-89350]
  - nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-89350]
  - vsock: Orphan socket after transport release (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - vsock: Keep the binding until socket destruction (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - bpf, vsock: Invoke proto::close on close() (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - RDMA/rxe: Fix the qp flush warnings in req (CKI Backport Bot) [RHEL-72373] {CVE-2024-53229}
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Guillaume Nault) [RHEL-89647] {CVE-2025-37749}
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-81770]
  - ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87984] {CVE-2025-37785}
  - ionic: add module eeprom channel data to ionic_if and ethtool (Mohammad Heib) [RHEL-88150]
  - ionic: support ethtool get_module_eeprom_by_page (Mohammad Heib) [RHEL-88150]
  - ionic: extend the QSFP module sprom for more pages (Mohammad Heib) [RHEL-88150]
  - ionic: use ee->offset when returning sprom data (Mohammad Heib) [RHEL-88150]
  - ionic: no double destroy workqueue (Mohammad Heib) [RHEL-88150]
  - ionic: Fix netdev notifier unregister on failure (Mohammad Heib) [RHEL-88150]
  - ionic: remove the unused nb_work (Mohammad Heib) [RHEL-88150]
  - ionic: add support for QSFP_PLUS_CMIS (Mohammad Heib) [RHEL-88150]
  - ionic: add speed defines for 200G and 400G (Mohammad Heib) [RHEL-88150]
  - ionic: Translate IONIC_RC_ENOSUPP to EOPNOTSUPP (Mohammad Heib) [RHEL-88150]
  - ionic: Use VLAN_ETH_HLEN when possible (Mohammad Heib) [RHEL-88150]
  - ionic: add asic codes to firmware interface file (Mohammad Heib) [RHEL-88150]
  - hugetlbfs: support idmapped mounts (CKI Backport Bot) [RHEL-35573]
  - redhat: create 'systemd-volatile-overlay' addon for UKI (Emanuele Giuseppe Esposito) [RHEL-86487]
  - efi: Fix building of efi-pstore when CONFIG_EFI_VARS_PSTORE=m (Lenny Szubowicz) [RHEL-90260]
  - ACPI: processor idle: Revert "avoid call to raw_local_irq_disable() from acpi_safe_halt()" (Waiman Long) [RHEL-22238]
  - ACPI/HMAT: Move HMAT messages to pr_debug() (Steve Dunnagan) [RHEL-70321]
  - cpufreq: Reference count policy in cpufreq_update_limits() (David Arcari) [RHEL-67849]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add sysfs ABI documentation (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add AMD 3D V-Cache optimizer driver (David Arcari) [RHEL-67849]
  - redhat/configs: enable CONFIG_AMD_3D_VCACHE for x86 on RHEL (David Arcari) [RHEL-67849]
  - enic: get max rq & wq entries supported by hw, 16K queues (Nelson Escobar) [RHEL-84862]
  - enic: cleanup of enic wq request completion path (Nelson Escobar) [RHEL-84862]
  - enic: added enic_wq.c and enic_wq.h (Nelson Escobar) [RHEL-84862]
  - enic: remove unused function cq_enet_wq_desc_dec (Nelson Escobar) [RHEL-84862]
  - enic: enable rq extended cq support (Nelson Escobar) [RHEL-84862]
  - enic: enic rq extended cq defines (Nelson Escobar) [RHEL-84862]
  - enic: enic rq code reorg (Nelson Escobar) [RHEL-84862]
  - enic: Move function from header file to c file (Nelson Escobar) [RHEL-84862]
  - enic: add dependency on Page Pool (Nelson Escobar) [RHEL-84862]
  - enic: remove copybreak tunable (Nelson Escobar) [RHEL-84862]
  - enic: Use the Page Pool API for RX (Nelson Escobar) [RHEL-84862]
  - enic: Simplify RX handler function (Nelson Escobar) [RHEL-84862]
  - enic: Move RX functions to their own file (Nelson Escobar) [RHEL-84862]
  - enic: Fix typo in comment in table indexed by link speed (Nelson Escobar) [RHEL-84862]
  - enic: Obtain the Link speed only after the link comes up (Nelson Escobar) [RHEL-84862]
  - enic: Move RX coalescing set function (Nelson Escobar) [RHEL-84862]
  - enic: Move kdump check into enic_adjust_resources() (Nelson Escobar) [RHEL-84862]
  - enic: Move enic resource adjustments to separate function (Nelson Escobar) [RHEL-84862]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (Nelson Escobar) [RHEL-84862]
  - enic: Allocate arrays in enic struct based on VIC config (Nelson Escobar) [RHEL-84862]
  - enic: Save resource counts we read from HW (Nelson Escobar) [RHEL-84862]
  - enic: Make MSI-X I/O interrupts come after the other required ones (Nelson Escobar) [RHEL-84862]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (Nelson Escobar) [RHEL-84862]
  - enic: Report some per queue statistics in ethtool (Nelson Escobar) [RHEL-84862]
  - enic: Report per queue statistics in netdev qstats (Nelson Escobar) [RHEL-84862]
  - enic: Collect per queue statistics (Nelson Escobar) [RHEL-84862]
  - enic: Use macro instead of static const variables for array sizes (Nelson Escobar) [RHEL-84862]
  - enic: add ethtool get_channel support (Nelson Escobar) [RHEL-84862]
  - enic: Validate length of nl attributes in enic_set_vf_port (Nelson Escobar) [RHEL-84862]
  - enic: Replace hardcoded values for vnic descriptor by defines (Nelson Escobar) [RHEL-84862]
  - enic: Avoid false positive under FORTIFY_SOURCE (Nelson Escobar) [RHEL-84862]
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (CKI Backport Bot) [RHEL-83243] {CVE-2025-21844}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-586.el9]
changelog:
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88921]
  - nvme: enable CONFIG_NVME_KEYRING (Maurizio Lombardi) [RHEL-72531]
  - nvmet-auth: always free derived key data (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: cleanup link state management (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: clear CC and CSTS when disabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: always fully initialize completion entries (Maurizio Lombardi) [RHEL-72531]
  - nvmet: auth: use NULL to clear a pointer in nvmet_auth_sq_free() (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-72531]
  - nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: take tgtport reference only once (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: update tgtport ref per assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_free_hostport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_delete_assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: add ref counting to lport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: replace kref with refcount (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: swap list_add_tail arguments (Maurizio Lombardi) [RHEL-72531]
  - nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-72531]
  - nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-72531]
  - nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-72531]
  - crypto,fs: Separate out hkdf_extract() and hkdf_expand() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: disable the target pci-epf module (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Keep completion queues mapped (Maurizio Lombardi) [RHEL-72531]
  - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace max(a, min(b, c)) by clamp(val, lo, hi) (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Always configure BAR0 as 64-bit (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Remove duplicate uuid_copy (Maurizio Lombardi) [RHEL-72531]
  - nvme: zns: Simplify nvme_zone_parse_entry() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Remove redundant 'flush_workqueue()' calls (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tls_concat and tls_key debugfs entries (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet-tcp: support secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet: Add 'sq' argument to alloc_ctrl_args (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-fabrics: reset admin connection for secure concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-tcp: request secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-keyring: add nvme_tls_psk_refresh() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_derive_tls_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_digest() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-72531]
  - io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not add an IRQ vector if not needed (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Set NVMET_PCI_EPF_Q_LIVE when a queue is fully created (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Maurizio Lombardi) [RHEL-72531]
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Maurizio Lombardi) [RHEL-72531 RHEL-86914] {CVE-2025-21927}
  - nvme-tcp: Fix a C2HTermReq error message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: remove old function prototype (Maurizio Lombardi) [RHEL-72531]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: clean up CMBMSC when registering CMB fails (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Maurizio Lombardi) [RHEL-72531]
  - nvme: only allow entering LIVE from CONNECTING state (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: rely on state transitions to handle connectivity loss (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Support coprocessors left idle (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Release power domains when probe fails (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: add missing space in err message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Avoid RCU stalls under heavy workload (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not uselessly write the CSTS register (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Correctly initialize CSTS when enabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Fix crash when a namespace is disabled (Maurizio Lombardi) [RHEL-72531 RHEL-73614 RHEL-85327] {CVE-2025-21850}
  - nvme-tcp: add basic support for the C2HTermReq PDU (Maurizio Lombardi) [RHEL-72531]
  - nvme: make nvme_tls_attrs_group static (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add a missing endianess conversion in nvmet_execute_admin_connect (Maurizio Lombardi) [RHEL-72531]
  - nvmet: the result field in nvmet_alloc_ctrl_args is little endian (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix a memory leak in controller identify (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: do not ignore connectivity loss during connecting (Maurizio Lombardi) [RHEL-72531]
  - nvme: handle connectivity loss in nvme_set_queue_count (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: go straight to connecting state when initializing (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove redundant dma frees in hmb (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix rw control endian access (Maurizio Lombardi) [RHEL-72531]
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use correct size to free the hmb buffer (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error path for xa_store in nvme_init_effects (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix comment typo (Maurizio Lombardi) [RHEL-72531]
  - nvmet: New NVMe PCI endpoint function target driver (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement arbitration feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt config feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt coalescing feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement host identifier set feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce get/set_feature controller operations (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Do not require SGL for PCI target controller commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add support for I/O queue management admin commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_sq_create() and nvmet_cq_create() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_req_transfer_len() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Improve nvmet_alloc_ctrl() interface and implementation (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add PCI transport type (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add drvdata field to struct nvmet_ctrl (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_get_cmd_effects_admin() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Export nvmet_update_cc() and nvmet_cc_xxx() helpers (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add vendor_id and subsys_vendor_id subsystem attributes (Maurizio Lombardi) [RHEL-72531]
  - nvme: Move opcode string helper functions declarations (Maurizio Lombardi) [RHEL-72531]
  - nvme: change return type of nvme_poll_cq() to bool (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error check for xa_store in nvme_get_effects_log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: handle rw's limited retry flag (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: remove nvme_tcp_destroy_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvmet-loop: avoid using mutex in IO hotpath (Maurizio Lombardi) [RHEL-72531]
  - nvmet: propagate npwg topology (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: 512 byte aligned dma pool segment quirk (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: simplify nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: no need to quiesce admin_q in nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix the memleak while create new ctrl failed (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56632}
  - nvme-pci: don't use dma_alloc_noncontiguous with 0 merge boundary (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace kmalloc + memset with kzalloc for data allocation (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove two deallocate zeroes quirks (Maurizio Lombardi) [RHEL-72531]
  - nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported (Maurizio Lombardi) [RHEL-72531]
  - nvmet: use kzalloc instead of ZERO_PAGE in nvme_execute_identify_ns_nvm() (Maurizio Lombardi) [RHEL-72531]
  - nvme: tuning pr code by using defined structs and macros (Maurizio Lombardi) [RHEL-72531]
  - nvme: introduce change ptpl and iekey definition (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tracing of reservation commands (Maurizio Lombardi) [RHEL-72531]
  - nvme: parse reservation commands's action and rtype to string (Maurizio Lombardi) [RHEL-72531]
  - nvmet: report ns's vwc not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: check ns's volatile write cache not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: add rotational support (Maurizio Lombardi) [RHEL-72531]
  - nvme: use command set independent id ns if available (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support for csi identify ns (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement rotational media information log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement endurance groups (Maurizio Lombardi) [RHEL-72531]
  - nvmet: declare 2.1 version compliance (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement crto property (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported features log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported log pages (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement active command set ns list (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement id ns for nvm command set (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support reservation feature (Maurizio Lombardi) [RHEL-72531]
  - nvme-core: remove repeated wq flags (Maurizio Lombardi) [RHEL-72531]
  - nvmet: make nvmet_wq visible in sysfs (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use dma_alloc_noncontigous if possible (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix freeing of the HMB descriptor table (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56756}
  - nvme: re-fix error-handling for io_uring nvme-passthrough (Maurizio Lombardi) [RHEL-72531]
  - nvme: module parameter to disable pi with offsets (Maurizio Lombardi) [RHEL-72531]
  - nvme: enhance cns version checking (Maurizio Lombardi) [RHEL-72531]
  - vfs: fix race between evice_inodes() and find_inode()&iput() (CKI Backport Bot) [RHEL-63193] {CVE-2024-47679}
  - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-86831]
  - proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86809] {CVE-2025-21999}
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87889] {CVE-2025-21969}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CKI Backport Bot) [RHEL-87889] {CVE-2025-21969}
  - scsi: mpi3mr: Event processing debug improvement (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Add level check to control event logging (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Reset the pending interrupt flag (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix pending I/O counter (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Check admin reply queue from Watchdog (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update timestamp only for supervisor IOCs (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update MPI Headers to revision 35 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix locking in an error path (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page1: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page0: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_pcie_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_sas_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-79805]
  - PCI: Use downstream bridges for distributing resources (Myron Stowe) [RHEL-73396]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-87960]
  - s390/qdio: Move memory alloc/pointer arithmetic for slib and sl into one place (Mete Durlu) [RHEL-73492]
  - s390/qdio: Rename feature flag aif_osa to aif_qdio (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Clarify zfcp_port refcount ownership during "link" test (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Correct kdoc parameter description for sending ELS and CT (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Switch over to sysfs_emit() (Mete Durlu) [RHEL-73492]
  - s390: Add z17 elf platform (Mete Durlu) [RHEL-89726]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-89579]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-89579]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-89579]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-89579]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-89579]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-89579]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-89579]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-89579]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-89579]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84571]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84571] {CVE-2025-23145}
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84571]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84571] {CVE-2025-21938}
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84571] {CVE-2025-21875}
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84571] {CVE-2025-21705}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84571] {CVE-2025-21707}
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84571]
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84571] {CVE-2025-21706}
  - mptcp: hold pm lock when deleting entry (Davide Caratti) [RHEL-84571]
  - mptcp: prevent MPC handshake on port-based signal endpoints (Davide Caratti) [RHEL-84571]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81397] {CVE-2025-21764}
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Fix fifo underflow on flush (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Adjust the timeout for FIFO mode (Derek Barbosa) [RHEL-89346]
  - tty: serial: 8250: Fix another runtime PM usage counter underflow (Derek Barbosa) [RHEL-89346]
  - Flush console log from kernel_power_off() (Derek Barbosa) [RHEL-89346]
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Derek Barbosa) [RHEL-89346]
  - dev_printk: Add and use dev_no_printk() (Derek Barbosa) [RHEL-89346]
  - printk: Let no_printk() use _printk() (Derek Barbosa) [RHEL-89346]
  - printk: index: Add indexing support to dev_printk (Derek Barbosa) [RHEL-89346]
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Waiman Long) [RHEL-72448]
  - rtc: rzn1: fix BCD to rtc_time conversion errors (Waiman Long) [RHEL-72448]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Waiman Long) [RHEL-72448] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Waiman Long) [RHEL-72448]
  - rtc: at91sam9: fix OF node leak in probe() error path (Waiman Long) [RHEL-72448]
  - rtc: interface: Add RTC offset to alarm after fix-up (Waiman Long) [RHEL-72448]
  - rtc: abx80x: Fix return value of nvmem callback on read (Waiman Long) [RHEL-72448]
  - rtc: cmos: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: isl1208: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Waiman Long) [RHEL-72448]
  - rtc: Extend timeout for waiting for UIP to clear to 1s (Waiman Long) [RHEL-72448]
  - rtc: Add support for configuring the UIP timeout for RTC reads (Waiman Long) [RHEL-72448]
  - rtc: Adjust failure return code for cmos_set_alarm() (Waiman Long) [RHEL-72448]
  - rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Waiman Long) [RHEL-72448]
  - rtc: efi: fixed typo in efi_procfs() (Waiman Long) [RHEL-72448]
  - rtc: brcmstb-waketimer: support level alarm_irq (Waiman Long) [RHEL-72448]
  - rtc: stop warning for invalid alarms when the alarm is disabled (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: Allow to wake up system without IRQ (Waiman Long) [RHEL-72448]
  - rtc: rv8803: fix Wvoid-pointer-to-enum-cast warning (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Simplify clk handling in st_rtc_probe() (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Waiman Long) [RHEL-72448]
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Waiman Long) [RHEL-72448]
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Guillaume Nault) [RHEL-84572]
  - net: Add non-RCU dev_getbyhwaddr() helper (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in inet_select_addr() (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in rt_is_expired() (Guillaume Nault) [RHEL-84572]
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Guillaume Nault) [RHEL-84572]
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Guillaume Nault) [RHEL-84572]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-587.el9]
changelog:
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. (Davide Caratti) [RHEL-84598]
  - net/af_packet: check len when min_header_len equals to 0 (Davide Caratti) [RHEL-84598]
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57901}
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57902}
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Davide Caratti) [RHEL-84598]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83634]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Remove unused iscsi_create_session() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: bnx2i: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Chris Leech) [RHEL-90552]
  - Revert "mm: kmemleak: alloc gray object for reserved region with direct map" (Luiz Capitulino) [RHEL-75156]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87899] {CVE-2025-21962}
  - cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87920] {CVE-2025-21964}
  - net: fix geneve_opt length integer overflow (CKI Backport Bot) [RHEL-87973] {CVE-2025-22055}
  - RDMA/core: Silence oversized kvmalloc() warning (Kamal Heib) [RHEL-75591]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Kamal Heib) [RHEL-75591]
  - RDMA/ucaps: Avoid format-security warning (Kamal Heib) [RHEL-75591]
  - IB/mad: Check available slots before posting receive WRs (Kamal Heib) [RHEL-75591]
  - RDMA/core: Pass port to counter bind/unbind operations (Kamal Heib) [RHEL-75591]
  - RDMA/core: Add support to optional-counters binding configuration (Kamal Heib) [RHEL-75591]
  - RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj() (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix use-after-free when rename device name (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Kamal Heib) [RHEL-75591]
  - docs: infiniband: document the UCAP API (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Add support for UCAPs in context creation (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Introduce UCAP (User CAPabilities) API (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fixes infiniband sysctl bounds (Kamal Heib) [RHEL-75591]
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix best page size finding when it can cross SG entries (Kamal Heib) [RHEL-75591]
  - IB/iser: fix typos in iscsi_iser.c comments (Kamal Heib) [RHEL-75591]
  - RDMA/core: Use ib_port_state_to_str() for IB state sysfs (Kamal Heib) [RHEL-75591]
  - IB/cache: Add log messages for IB device state changes (Kamal Heib) [RHEL-75591]
  - ext4: avoid writing unitialized memory to disk in EA inodes (Brian Foster) [RHEL-86510]
  - ext4: don't track ranges in fast_commit if inode has inlined data (Brian Foster) [RHEL-86510]
  - ext4: fix possible tid_t sequence overflows (Brian Foster) [RHEL-86510]
  - ext4: use ext4_update_inode_fsync_trans() helper in inode creation (Brian Foster) [RHEL-86510]
  - ext4: use memtostr_pad() for s_volume_name (Brian Foster) [RHEL-86510]
  - ext4: warn if delalloc counters are not zero on inactive (Brian Foster) [RHEL-86510]
  - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-86510]
  - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-86510]
  - ext4: correct the hole length returned by ext4_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-86510]
  - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: propagate errors from ext4_sb_bread() in ext4_xattr_block_cache_find() (Brian Foster) [RHEL-86510]
  - jbd2: remove redundant assignement to variable err (Brian Foster) [RHEL-86510]
  - ext4: remove the redundant folio_wait_stable() (Brian Foster) [RHEL-86510]
  - ext4: fix potential unnitialized variable (Brian Foster) [RHEL-86510]
  - ext4: remove block_device_ejected() (Brian Foster) [RHEL-86510]
  - ext4: keep "prefetch_grp" and "nr" consistent (Brian Foster) [RHEL-86510]
  - ext4: replace deprecated strncpy with alternatives (Brian Foster) [RHEL-86510]
  - ext4: clean up s_mb_rb_lock to fix build warnings with C=1 (Brian Foster) [RHEL-86510]
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_show() (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_store() (Brian Foster) [RHEL-86510]
  - ext4: avoid overflow when setting values via sysfs (Brian Foster) [RHEL-86510]
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Brian Foster) [RHEL-86510]
  - ext4: remove unneeded if checks before kfree (Brian Foster) [RHEL-86510]
  - ext4: set FMODE_CAN_ODIRECT instead of a dummy direct_IO method (Brian Foster) [RHEL-86510]
  - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-83380] {CVE-2024-50301}
  - tracing/histograms: Fix memory leak problem (CKI Backport Bot) [RHEL-81008] {CVE-2022-49648}
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Marcin Juszkiewicz) [RHEL-92493]
  - redhat: add test_klp_kprobe to mod-internal.list (Denis Aleksandrov) [RHEL-90828]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-89689]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87253] {CVE-2022-3424}
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski) [RHEL-74389]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - io_uring: prevent opcode speculation (CKI Backport Bot) [RHEL-83230] {CVE-2025-21863}


author: Tao Liu <ltao@redhat.com> - 2.0.27-10
changelog:
  - mkdumprd: Fix makedumpfile parameter check.
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Tao Liu <ltao@redhat.com> - 2.0.27-13
changelog:
  - kdump-lib: Drop 'file' dependency in is_uki
  - kdumpctl.8: Add description to reset-crashkernel --reboot
  - kdumpctl: Fix misleading message and erratic reboot in reset_crashkernel
  - kdumpctl: Drop default kexec '-d' option


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: - Chung Chung <cchung@redhat.com> - 8.2.5.2-155.el9
changelog:
  - TEMPORARY FIX to correct build failures regarding blk_limits_io_{min,opt} error
  - Related: RHEL-61201


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Dan Horák <dan[at]danny.cz> - 3.8.0-1
changelog:
  - updated to 3.8.0 (#1869532)
  - eliminate SW fallback functions (#1924119)
  - updated for OpenSSL 3.0 (#1952946)
  - disable FIPS support (broken)
  - Resolves: #1869532 #1924119 #1952946


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912


author: Dan Horák <dan@danny.cz> - 2.2.0-1
changelog:
  - updated to 2.2.0 (#1869531)
  - eliminate SW fallback functions (#1924117)
  - Resolves: #1869531 #1924117


author: Dan Horák <dhorak@redhat.com> - 2.3.0-1
changelog:
  - updated to 2.3.0 (#2044177)
  - add provider for openssl 3.x (#2044185)
  - Resolves: #2044177 #2044185


author: Dan Horák <dhorak@redhat.com> - 2.4.0-2
changelog:
  - engine: Only register those algos specified with default_algorithms (#2221894)
  - Resolves: #2221894


author: Dan Horák <dhorak@redhat.com> - 2.4.0-4
changelog:
  - provider: RSA: Fix get_params to retrieve max-size, bits, and security-bits (#2222878 #2224568)
  - provider: Default debug directory to /tmp but make it configurable (#2160084)
  - Resolves: #2222878 #2160084 #2224568


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Tom Stellard <tstellar@redhat.com> - 3.78-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomas Orsava <torsava@redhat.com> - 1.14.5-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-550.el9]
changelog:
  - redhat/configs: replace IOMMU_DEFAULT_DMA_STRICT with IOMMU_DEFAULT_DMA_LAZY (Mete Durlu) [RHEL-69993]
  - sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66809] {CVE-2024-50223}
  - redhat/configs: enable CONFIG_USB_XHCI_PCI_RENESAS on RHEL (Desnes Nunes) [RHEL-72093]
  - configs: new configs in drivers/phy (Izabela Bakollari) [RHEL-57766]
  - net: mii: constify advertising mask (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83822: Fix reset pin definitions (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: Fix MMD access on RTL8126A-integrated PHY (Izabela Bakollari) [RHEL-57766]
  - net: phy: Remove LED entry from LEDs list on unregister (Izabela Bakollari) [RHEL-57766 RHEL-63771] {CVE-2024-50023}
  - net: phy: bcm84881: Fix some error handling paths (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: remove usage of phy_set_max_speed (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: AQR115c fix up PMA capabilities (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83869: fix memory corruption when enabling fiber (Izabela Bakollari) [RHEL-57766]
  - net: phy: microchip_t1s: add c45 direct access in LAN865x internal PHY (Izabela Bakollari) [RHEL-57766]
  - net: phy: microchip_t1: Cable Diagnostics for lan887x (Izabela Bakollari) [RHEL-57766]
  - net: phylink: Add phylink_set_fixed_link() to configure fixed link state in phylink (Izabela Bakollari) [RHEL-57766]
  - net: phy: qca83xx: use PHY_ID_MATCH_EXACT (Izabela Bakollari) [RHEL-57766]
  - net: phy: Add driver for Motorcomm yt8821 2.5G ethernet phy (Izabela Bakollari) [RHEL-57766]
  - net: phy: Optimize phy speed mask to be compatible to yt8821 (Izabela Bakollari) [RHEL-57766]
  - net: phy: Check for read errors in SIOCGMIIREG (Izabela Bakollari) [RHEL-57766]
  - net: phy: Use for_each_available_child_of_node_scoped() (Izabela Bakollari) [RHEL-57766]
  - net: phy: Fix missing of_node_put() for leds (Izabela Bakollari) [RHEL-57766]
  - net: phy: vitesse: implement MDI-X configuration in vsc73xx (Izabela Bakollari) [RHEL-57766]
  - phy: dp83td510: Utilize ALCD for cable length measurement when link is active (Izabela Bakollari) [RHEL-57766]
  - net: phy: microchip_t1: Adds support for lan887x phy (Izabela Bakollari) [RHEL-57766]
  - net: phy: Add phy library support to check supported list when autoneg is enabled (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83tg720: Add cable testing support (Izabela Bakollari) [RHEL-57766]
  - phy: Add Open Alliance helpers for the PHY framework (Izabela Bakollari) [RHEL-57766]
  - net: phy: vitesse: repair vsc73xx autonegotiation (Izabela Bakollari) [RHEL-57766]
  - net: phylib: do not disable autoneg for fixed speeds >= 1G (Izabela Bakollari) [RHEL-57766]
  - net: phy: phy_device: fix PHY WOL enabled, PM failed to suspend (Izabela Bakollari) [RHEL-57766]
  - net: phy: vitesse: implement downshift in vsc73xx phys (Izabela Bakollari) [RHEL-57766]
  - net: phy: qca807x: Drop unnecessary and broken DT validation (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: only poll GLOBAL_CFG regs on aqr113, aqr113c and aqr115c (Izabela Bakollari) [RHEL-57766]
  - net: phy: micrel: Fix the KSZ9131 MDI-X status issue (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: add support for RTL8366S Gigabit PHY (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: add support for aqr115c (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: wait for the GLOBAL_CFG to start returning real values (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: rename and export aqr107_wait_reset_complete() (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: add missing include guards (Izabela Bakollari) [RHEL-57766]
  - net: phy: introduce core support for phy-mode = "10g-qxgmii" (Izabela Bakollari) [RHEL-57766]
  - net: phylink: add phylink_get_link_timer_ns() helper (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: fix -ETIMEDOUT PHY probe failure when firmware not present (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: fix applying active_low bit after reset (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: fix setting active_low bit (Izabela Bakollari) [RHEL-57766]
  - net: phy: bcm54811: Add LRE registers definitions (Izabela Bakollari) [RHEL-57766]
  - net: phy: bcm-phy-lib: Implement BroadR-Reach link modes (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83td510: add cable testing support (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: wait for FW reset before checking the vendor ID (Izabela Bakollari) [RHEL-57766]
  - net: phy: microchip: lan937x: add support for 100BaseTX PHY (Izabela Bakollari) [RHEL-57766]
  - net: phy: microchip: lan87xx: reinit PHY after cable test (Izabela Bakollari) [RHEL-57766]
  - net: phy: fix potential use of NULL pointer in phy_suspend() (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: Check the index value in led_hw_control_get (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: Fix setting of PHY LEDs Mode B bit on RTL8211F (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: Add support for PHY LEDs on RTL8211F (Izabela Bakollari) [RHEL-57766]
  - net: phy: phy_device: Fix PHY LED blinking code comment (Izabela Bakollari) [RHEL-57766]
  - net: phy: mxl-gpy: Remove interrupt mask clearing from config_init (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: add support for rtl8224 2.5Gbps PHY (Izabela Bakollari) [RHEL-57766]
  - gpiolib: put gpio_suffixes in a single compilation unit (Izabela Bakollari) [RHEL-57766]
  - net: sfp: Always call `sfp_sm_mod_remove()` on remove (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: add support for PHY LEDs (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: move priv and hw stat to header (Izabela Bakollari) [RHEL-57766]
  - net: phy: Micrel KSZ8061: fix errata solution not taking effect problem (Izabela Bakollari) [RHEL-57766]
  - net: phylink: rename ovr_an_inband to default_an_inband (Izabela Bakollari) [RHEL-57766]
  - net: phylink: move test for ovr_an_inband (Izabela Bakollari) [RHEL-57766]
  - net: phylink: rearrange phylink_parse_mode() (Izabela Bakollari) [RHEL-57766]
  - net: phy: xilinx-gmii2rgmii: Adopt clock support (Izabela Bakollari) [RHEL-57766]
  - net: micrel: Fix lan8841_config_intr after getting out of sleep mode (Izabela Bakollari) [RHEL-57766]
  - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 (Izabela Bakollari) [RHEL-57766]
  - net: phy: air_en8811h: reset netdev rules when LED is set manually (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: add support for Rev B1 and B2 (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell: add support for MV88E6250 family internal PHYs (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell: constify marvell_hw_stats (Izabela Bakollari) [RHEL-57766]
  - net: sfp-bus: constify link_modes to sfp_select_interface() (Izabela Bakollari) [RHEL-57766]
  - net: sfp: allow use 2500base-X for 2500base-T modules (Izabela Bakollari) [RHEL-57766]
  - net: phylink: add debug print for empty posssible_interfaces (Izabela Bakollari) [RHEL-57766]
  - net: phy: micrel: Add support for PTP_PF_EXTTS for lan8814 (Izabela Bakollari) [RHEL-57766]
  - net: sfp: add quirk for ATS SFP-GE-T 1000Base-TX module (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83869: Fix MII mode failure (Izabela Bakollari) [RHEL-57766]
  - net: phy: mediatek-ge-soc: follow netdev LED trigger semantics (Izabela Bakollari) [RHEL-57766]
  - net: phy: mediatek-ge: do not disable EEE advertisement (Izabela Bakollari) [RHEL-57766]
  - net: sfp: add quirk for another multigig RollBall transceiver (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: add rtl822x_c45_get_features() to set supported port (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: Change rtlgen_get_speed() to rtlgen_decode_speed() (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: Add driver instances for rtl8221b via Clause 45 (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: add get_rate_matching() for rtl822xb PHYs (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: configure SerDes mode for rtl822xb PHYs (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp8382x: keep WOL settings across suspends (Izabela Bakollari) [RHEL-57766]
  - net: phy: micrel: lan8814: Add support for PTP_PF_PEROUT (Izabela Bakollari) [RHEL-57766]
  - net: phy: micrel: lan8814: Enable LTC at probe time (Izabela Bakollari) [RHEL-57766]
  - net: phy: air_en8811h: fix some error codes (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell: implement cable test for 88E1111 (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell: implement cable-test for 88E308X/88E609X family (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell: add basic support of 88E308X/88E609X family (Izabela Bakollari) [RHEL-57766]
  - net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: add support for AQR114C PHY ID (Izabela Bakollari) [RHEL-57766]
  - dt-bindings: net: airoha,en8811h: Add en8811h (Izabela Bakollari) [RHEL-57766]
  - net: phy: air_en8811h: Add the Airoha EN8811H PHY driver (Izabela Bakollari) [RHEL-57766]
  - net: stmmac: Signal to PHY/PCS drivers to keep RX clock on (Izabela Bakollari) [RHEL-57766]
  - net: phy: qcom: at803x: Avoid hibernating if MAC requires RX clock (Izabela Bakollari) [RHEL-57766]
  - net: phylink: add rxc_always_on flag to phylink_pcs (Izabela Bakollari) [RHEL-57766]
  - net: phylink: add PHY_F_RXC_ALWAYS_ON to PHY dev flags (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88x2222: Remove unused of_gpio.h (Izabela Bakollari) [RHEL-57766]
  - net: mdio_bus: Remove unused of_gpio.h (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83822: Fix RGMII TX delay configuration (Izabela Bakollari) [RHEL-57766]
  - net: phy: fix phy_get_internal_delay accessing an empty array (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell: add comment about m88e1111_config_init_1000basex() (Izabela Bakollari) [RHEL-57766]
  - net: phy: micrel: lan8814 cable improvement errata (Izabela Bakollari) [RHEL-57766]
  - net: phy: micrel: lan8814 led errata (Izabela Bakollari) [RHEL-57766]
  - net: phy: qcom: qca808x: fill in possible_interfaces (Izabela Bakollari) [RHEL-57766]
  - net: phy: qcom: qca808x: add helper for checking for 1G only model (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83826: disable WOL at init (Izabela Bakollari) [RHEL-57766]
  - gpiolib: Pass consumer device through to core in devm_fwnode_gpiod_get_index() (Izabela Bakollari) [RHEL-57766]
  - net: phy: simplify genphy_c45_ethtool_set_eee (Izabela Bakollari) [RHEL-57766]
  - dt-bindings: net: dp83822: support configuring RMII master/slave mode (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83826: support configuring RMII master/slave operation mode (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83826: Add support for phy-mode configuration (Izabela Bakollari) [RHEL-57766]
  - net: phy: realtek: Fix rtl8211f_config_init() for RTL8211F(D)(I)-VD-CG PHY (Izabela Bakollari) [RHEL-57766]
  - net: phy: Add BaseT1 auto-negotiation constants (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: move interrupt configuration (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: remove duplicated assignment of pma_extable (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: cleanup mv88q2xxx_config_init (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: switch to mv88q2xxx_config_aneg (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: make mv88q2xxx_config_aneg generic (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: add cable test support (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: add support for temperature sensor (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: add suspend / resume ops (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: add interrupt support for link detection (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: add driver for the Marvell 88Q2220 PHY (Izabela Bakollari) [RHEL-57766]
  - net: phy: marvell-88q2xxx: fix typos (Izabela Bakollari) [RHEL-57766]
  - net: phy: c45: detect 100/1000BASE-T1 linkmode advertisements (Izabela Bakollari) [RHEL-57766]
  - net: phy: Support 100/1000BT1 linkmode advertisements (Izabela Bakollari) [RHEL-57766]
  - net: phy: mxl-gpy: fill in possible_interfaces for GPY21x chipset (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: add AQR813 PHY ID (Izabela Bakollari) [RHEL-57766]
  - net: phy: c45: add support for MDIO_AN_EEE_ADV2 (Izabela Bakollari) [RHEL-57766]
  - net: phy: c45: add support for EEE link partner ability 2 to genphy_c45_read_eee_lpa (Izabela Bakollari) [RHEL-57766]
  - net: phy: c45: add and use genphy_c45_read_eee_cap2 (Izabela Bakollari) [RHEL-57766]
  - net: phy: add PHY_EEE_CAP2_FEATURES (Izabela Bakollari) [RHEL-57766]
  - net: mdio: add helpers for accessing the EEE CAP2 registers (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: add AQR113 PHY ID (Izabela Bakollari) [RHEL-57766 RHEL-66298]
  - net: fill in MODULE_DESCRIPTION()s for mdio_devres (Izabela Bakollari) [RHEL-57766]
  - net: mdio_bus: make mdio_bus_type const (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: add AQR111 and AQR111B0 PHY ID (Izabela Bakollari) [RHEL-57766]
  - dt-bindings: net: dp83826: support TX data voltage tuning (Izabela Bakollari) [RHEL-57766]
  - net: phy: dp83826: support TX data voltage tuning (Izabela Bakollari) [RHEL-57766]
  - net: phy: aquantia: clear PMD Global Transmit Disable bit during init (Izabela Bakollari) [RHEL-57766]
  - gpiolib: make gpiochip_get_desc() public (Izabela Bakollari) [RHEL-57766]
  - gpiolib: unexport gpiod_set_transitory() (Izabela Bakollari) [RHEL-57766]
  - net: phy/pcs: Explicitly include correct DT includes (Izabela Bakollari) [RHEL-57766]
  - redhat: make kernel-debug-uki-virt installable without kernel-debug-core (Vitaly Kuznetsov) [RHEL-70874]
  - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28791]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28791]
  - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28791]
  - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-72206]
  - net: e1000e & ixgbe: Remove PCI_HEADER_TYPE_MFD duplicates (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - net: intel: implement modern PM ops declarations (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: pull out stats update to common routines (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: Add 1000BASE-BX support (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - intel: make module parameters readable in sys filesystem (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - net: adopt skb_network_offset() and similar helpers (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: Clarify the values of the returning status (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: Rearrange args to fix reverse Christmas tree (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: Convert ret val type from s32 to int (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: Refactor returning internal error codes (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: Refactor overtemp event handling (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbe: report link state for VF devices (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - intel: legacy: field get conversion (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - intel: legacy: field prep conversion (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - ixgbevf: Remove unused function declarations (Ivan Vecera) [RHEL-49821 RHEL-49823]
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Mamatha Inamdar) [RHEL-56343]
  - selftests/ftrace: Add test to exercize function tracer across cpu hotplug (Mamatha Inamdar) [RHEL-56343]
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Mamatha Inamdar) [RHEL-56343]
  - platform/x86/intel/pmc: Disable C1 auto-demotion during suspend (David Arcari) [RHEL-66571]
  - platform/x86/intel/pmc: Refactor platform resume functions to use cnl_resume() (David Arcari) [RHEL-66571]
  - Revert "vfio/pci: Use unmap_mapping_range()" (Cédric Le Goater) [RHEL-72566]
  - Revert "vfio/pci: Insert full vma on mmap'd MMIO fault" (Cédric Le Goater) [RHEL-72566]
  - Revert "vfio/pci: Remove unused struct 'vfio_pci_mmap_vma'" (Cédric Le Goater) [RHEL-72566]
  - redhat/kernel.spec.template: Require kernel-tools-libs in rtla (Tomas Glozar) [RHEL-72568]
  - rtla/timerlat: Fix histogram ALL for zero samples (Tomas Glozar) [RHEL-64000]
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Jeremy Linton) [RHEL-71918]
  - s390/cio: Do not unregister the subchannel based on DNV (Mete Durlu) [RHEL-71655]
  - s390/pci: Expose FIDPARM attribute in sysfs (Mete Durlu) [RHEL-71375]
  - bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-62688 RHEL-69084]
  - bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-62688 RHEL-69084]
  - bnxt_en: Fix receive ring space parameters when XDP is active (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Fix queue start to update vnic RSS table (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Set backplane link modes correctly for ethtool (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Michal Schmidt) [RHEL-62688]
  - bnxt_en: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-62688]
  - bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Michal Schmidt) [RHEL-62688]
  - bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Michal Schmidt) [RHEL-62688]
  - bnxt_en: replace ptp_lock with irqsave variant (Michal Schmidt) [RHEL-62688]
  - bnxt_en: resize bnxt_irq name field to fit format string (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Add MSIX check in bnxt_check_rings() (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Increase the number of MSIX vectors for RoCE device (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Support dynamic MSIX (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Allocate the max bp->irq_tbl size for dynamic msix allocation (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Replace deprecated PCI MSIX APIs (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Remove register mapping to support INTX (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Remove BNXT_FLAG_USING_MSIX flag (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Deprecate support for legacy INTX mode (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Support QOS and TPID settings for the SRIOV VLAN (Michal Schmidt) [RHEL-62688]
  - bnxt_en: add support for retrieving crash dump using ethtool (Michal Schmidt) [RHEL-62688]
  - bnxt_en: add support for storing crash dump into host memory (Michal Schmidt) [RHEL-62688]
  - bnxt_en: avoid truncation of per rx run debugfs filename (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Extend maximum length of version string by 1 byte (Michal Schmidt) [RHEL-62688]
  - bnxt_en: only set dev->queue_mgmt_ops if supported by FW (Michal Schmidt) [RHEL-62688]
  - bnxt_en: stop packet flow during bnxt_queue_stop/start (Michal Schmidt) [RHEL-62688]
  - bnxt_en: set vnic->mru in bnxt_hwrm_vnic_cfg() (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Check the FW's VNIC flush capability (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Add support to call FW to update a VNIC (Michal Schmidt) [RHEL-62688]
  - bnxt_en: Update firmware interface to 1.10.3.68 (Michal Schmidt) [RHEL-62688]
  - bnxt_en: update xdp_rxq_info in queue restart logic (Michal Schmidt) [RHEL-62688]
  - bnxt_en: unlink page pool when stopping Rx queue (Michal Schmidt) [RHEL-62688]
  - iommu/tegra241-cmdqv: do not use smp_processor_id in preemptible context (Luis Claudio R. Goncalves) [RHEL-66917]
  - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-50791]
  - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-50791]
  - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-50791]
  - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-50791]
  - s390/iucv: Correct spelling in iucv.h (Mete Durlu) [RHEL-71085]
  - s390/lcs: add missing MODULE_DESCRIPTION() macro (Mete Durlu) [RHEL-71085]
  - iucv: make iucv_bus const (Mete Durlu) [RHEL-71085]
  - selftests/powerpc: Add {read,write}_{long,ulong} (Mamatha Inamdar) [RHEL-68540]
  - selftests/powerpc: Parse long/unsigned long value safely (Mamatha Inamdar) [RHEL-68540]
  - selftests/powerpc: Add read/write debugfs file, int (Mamatha Inamdar) [RHEL-68540]
  - selftests/powerpc: Add generic read/write file util (Mamatha Inamdar) [RHEL-68540]
  - selftests/powerpc: Add ptrace setup_core_pattern() null-terminator (Mamatha Inamdar) [RHEL-68540]
  - selftests/powerpc: Fix resource leaks (Mamatha Inamdar) [RHEL-68540]
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (CKI Backport Bot) [RHEL-69580] {CVE-2024-53103}
  - r8169: avoid unsolicited interrupts (Michal Schmidt) [RHEL-70377]
  - r8169: add missing MODULE_FIRMWARE entry for RTL8126A rev.b (Michal Schmidt) [RHEL-70377]
  - r8169: add tally counter fields added with RTL8125 (Michal Schmidt) [RHEL-64552 RHEL-70377] {CVE-2024-49973}
  - r8169: disable ALDPS per default for RTL8125 (Michal Schmidt) [RHEL-70377]
  - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" (Michal Schmidt) [RHEL-70377]
  - r8169: add support for RTL8126A rev.b (Michal Schmidt) [RHEL-70377]
  - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY (Michal Schmidt) [RHEL-70377]
  - r8169: disable interrupt source RxOverflow (Michal Schmidt) [RHEL-70377]
  - Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already" (Michal Schmidt) [RHEL-70377]
  - r8169: simplify code by using core-provided pcpu stats allocation (Michal Schmidt) [RHEL-70377]
  - r8169: use new helper phy_advertise_eee_all (Michal Schmidt) [RHEL-70377]
  - r8169: fix ASPM-related issues on a number of systems with NIC version from RTL8168h (Michal Schmidt) [RHEL-70377]
  - r8169: use new PM macros (Michal Schmidt) [RHEL-70377]
  - selftests: netfilter: Stabilize rpath.sh (Phil Sutter) [RHEL-21040]
  - selftests: netfilter: skip tests on early errors (Phil Sutter) [RHEL-21040]
  - selftests: netfilter: nft_audit.sh: add more skip checks (Phil Sutter) [RHEL-21040]
  - selftests: netfilter: Fix permissions of nft_audit.sh (Phil Sutter) [RHEL-21040]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-551.el9]
changelog:
  - io_uring: manually fix compilation error (Jeff Moyer) [RHEL-64867]
  - io_uring: fix corner case forgetting to vunmap (Jeff Moyer) [RHEL-64867]
  - io_uring: fix memory leak when cache init fail (Jeff Moyer) [RHEL-64867]
  - io_uring/io-wq: inherit cpuset of cgroup in io worker (Jeff Moyer) [RHEL-64867]
  - io_uring/io-wq: do not allow pinning outside of cpuset (Jeff Moyer) [RHEL-64867]
  - io_uring: fix io_match_task must_hold (Jeff Moyer) [RHEL-64867]
  - io_uring: Fix probe of disabled operations (Jeff Moyer) [RHEL-64867]
  - net: always try to set ubuf in skb_zerocopy_iter_stream (Jeff Moyer) [RHEL-64867]
  - kasan: fix bad call to unpoison_slab_object (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: close race on waiting for sqring entries (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: fix cflags posting for single issue multishot read (Jeff Moyer) [RHEL-64867]
  - io_uring/net: harden multishot termination case for recv (Jeff Moyer) [RHEL-64867]
  - io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: do not put cpumask on stack (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: retain test for whether the CPU is valid (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: do not allow pinning outside of cpuset (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: return correct iovec count from classic buffer peek (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: sanitize peek buffer setup (Jeff Moyer) [RHEL-64867]
  - io_uring/napi: check napi_enabled in io_napi_add() before proceeding (Jeff Moyer) [RHEL-64867]
  - io_uring/net: don't pick multiple buffers for non-bundle send (Jeff Moyer) [RHEL-64867]
  - io_uring/net: ensure expanded bundle send gets marked for cleanup (Jeff Moyer) [RHEL-64867]
  - io_uring/net: ensure expanded bundle recv gets marked for cleanup (Jeff Moyer) [RHEL-64867]
  - io_uring: keep multishot request NAPI timeout current (Jeff Moyer) [RHEL-64867]
  - io_uring: don't allow netpolling with SETUP_IOPOLL (Jeff Moyer) [RHEL-64867]
  - io_uring: tighten task exit cancellations (Jeff Moyer) [RHEL-64867]
  - io_uring: fix error pbuf checking (Jeff Moyer) [RHEL-64867]
  - io_uring: fix lost getsockopt completions (Jeff Moyer) [RHEL-64867]
  - io_uring/io-wq: limit retrying worker initialisation (Jeff Moyer) [RHEL-64867]
  - io_uring/net: don't clear msg_inq before io_recv_buf_select() needs it (Jeff Moyer) [RHEL-64867]
  - io_uring: signal SQPOLL task_work with TWA_SIGNAL_NO_IPI (Jeff Moyer) [RHEL-64867]
  - io_uring: remove dead struct io_submit_state member (Jeff Moyer) [RHEL-64867]
  - io_uring/rsrc: fix incorrect assignment of iter->nr_segs in io_import_fixed (Jeff Moyer) [RHEL-64867]
  - io_uring: fix cancellation overwriting req->flags (Jeff Moyer) [RHEL-64867]
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Jeff Moyer) [RHEL-64867]
  - io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue() (Jeff Moyer) [RHEL-64867]
  - io_uring/napi: fix timeout calculation (Jeff Moyer) [RHEL-64867]
  - io_uring: check for non-NULL file pointer in io_file_can_poll() (Jeff Moyer) [RHEL-64867]
  - io_uring/net: assign kmsg inq/flags before buffer selection (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: Free iovec before cleaning async data (Jeff Moyer) [RHEL-64867]
  - io_uring: don't attempt to mmap larger than what the user asks for (Jeff Moyer) [RHEL-64867]
  - io_uring: remove checks for NULL 'sq_offset' (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: ensure that normal task_work is also run timely (Jeff Moyer) [RHEL-64867]
  - io_uring/net: wire up IORING_CQE_F_SOCK_NONEMPTY for accept (Jeff Moyer) [RHEL-64867]
  - net: pass back whether socket was empty post accept (Jeff Moyer) [RHEL-64867]
  - perf beauty: Update copy of linux/socket.h with the kernel sources (Jeff Moyer) [RHEL-64867]
  - net: have do_accept() take a struct proto_accept_arg argument (Jeff Moyer) [RHEL-64867]
  - net: make __sys_accept4_file() static (Jeff Moyer) [RHEL-64867]
  - selftests/bpf: fix inet_csk_accept prototype in test_sk_storage_tracing.c (Jeff Moyer) [RHEL-64867]
  - net: change proto and proto_ops accept type (Jeff Moyer) [RHEL-64867]
  - io_uring: support to inject result for NOP (Jeff Moyer) [RHEL-64867]
  - io_uring/net: add IORING_ACCEPT_POLL_FIRST flag (Jeff Moyer) [RHEL-64867]
  - io_uring/net: add IORING_ACCEPT_DONTWAIT flag (Jeff Moyer) [RHEL-64867]
  - io_uring/filetable: don't unnecessarily clear/reset bitmap (Jeff Moyer) [RHEL-64867]
  - io_uring/msg_ring: cleanup posting to IOPOLL vs !IOPOLL ring (Jeff Moyer) [RHEL-64867]
  - io_uring/notif: disable LAZY_WAKE for linked notifs (Jeff Moyer) [RHEL-64867]
  - io_uring/msg_ring: reuse ctx->submitter_task read using READ_ONCE instead of re-reading it (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: reinstate thread check for retries (Jeff Moyer) [RHEL-64867]
  - io_uring/notif: implement notification stacking (Jeff Moyer) [RHEL-64867]
  - io_uring/notif: simplify io_notif_flush() (Jeff Moyer) [RHEL-64867]
  - net: add callback for setting a ubuf_info to skb (Jeff Moyer) [RHEL-64867]
  - net: extend ubuf_info callback to ops structure (Jeff Moyer) [RHEL-64867]
  - io_uring/net: support bundles for recv (Jeff Moyer) [RHEL-64867]
  - io_uring/net: support bundles for send (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: add helpers for getting/peeking multiple buffers (Jeff Moyer) [RHEL-64867]
  - io_uring/net: add provided buffer support for IORING_OP_SEND (Jeff Moyer) [RHEL-64867]
  - io_uring/net: add generic multishot retry helper (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: ensure retry condition isn't lost (Jeff Moyer) [RHEL-64867]
  - io-wq: Drop intermediate step between pending list and active work (Jeff Moyer) [RHEL-64867]
  - io_uring/notif: shrink account_pages to u32 (Jeff Moyer) [RHEL-64867]
  - io_uring/notif: remove ctx var from io_notif_tw_complete (Jeff Moyer) [RHEL-64867]
  - io_uring/notif: refactor io_tx_ubuf_complete() (Jeff Moyer) [RHEL-64867]
  - io_uring: ensure overflow entries are dropped when ring is exiting (Jeff Moyer) [RHEL-64867]
  - io_uring/timeout: remove duplicate initialization of the io_timeout list. (Jeff Moyer) [RHEL-64867]
  - io_uring: consolidate overflow flushing (Jeff Moyer) [RHEL-64867]
  - io_uring: always lock __io_cqring_overflow_flush (Jeff Moyer) [RHEL-64867]
  - io_uring: open code io_cqring_overflow_flush() (Jeff Moyer) [RHEL-64867]
  - io_uring: remove extra SQPOLL overflow flush (Jeff Moyer) [RHEL-64867]
  - io_uring: unexport io_req_cqe_overflow() (Jeff Moyer) [RHEL-64867]
  - io_uring: separate header for exported net bits (Jeff Moyer) [RHEL-64867]
  - io_uring/net: set MSG_ZEROCOPY for sendzc in advance (Jeff Moyer) [RHEL-64867]
  - io_uring/net: get rid of io_notif_complete_tw_ext (Jeff Moyer) [RHEL-64867]
  - io_uring/net: merge ubuf sendzc callbacks (Jeff Moyer) [RHEL-64867]
  - io_uring: return void from io_put_kbuf_comp() (Jeff Moyer) [RHEL-64867]
  - io_uring: remove io_req_put_rsrc_locked() (Jeff Moyer) [RHEL-64867]
  - io_uring: remove async request cache (Jeff Moyer) [RHEL-64867]
  - io_uring: turn implicit assumptions into a warning (Jeff Moyer) [RHEL-64867]
  - io_uring: kill dead code in io_req_complete_post (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: remove dead define (Jeff Moyer) [RHEL-64867]
  - io_uring: fix warnings on shadow variables (Jeff Moyer) [RHEL-64867]
  - io_uring: move mapping/allocation helpers to a separate file (Jeff Moyer) [RHEL-64867]
  - io_uring: use unpin_user_pages() where appropriate (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: vmap pinned buffer ring (Jeff Moyer) [RHEL-64867]
  - io_uring: unify io_pin_pages() (Jeff Moyer) [RHEL-64867]
  - io_uring/rsrc: cleanup io_pin_pages() (Jeff Moyer) [RHEL-64867]
  - io_uring: use vmap() for ring mapping (Jeff Moyer) [RHEL-64867]
  - io_uring: get rid of remap_pfn_range() for mapping rings/sqes (Jeff Moyer) [RHEL-64867]
  - io_uring: Avoid anonymous enums in io_uring uapi (Jeff Moyer) [RHEL-64867]
  - io_uring: Remove unused function (Jeff Moyer) [RHEL-64867]
  - io_uring: re-arrange Makefile order (Jeff Moyer) [RHEL-64867]
  - io_uring: refill request cache in memory order (Jeff Moyer) [RHEL-64867]
  - io_uring/poll: shrink alloc cache size to 32 (Jeff Moyer) [RHEL-64867]
  - io_uring/alloc_cache: switch to array based caching (Jeff Moyer) [RHEL-64867]
  - io_uring: drop ->prep_async() (Jeff Moyer) [RHEL-64867]
  - io_uring/uring_cmd: defer SQE copying until it's needed (Jeff Moyer) [RHEL-64867]
  - io_uring/uring_cmd: switch to always allocating async data (Jeff Moyer) [RHEL-64867]
  - io_uring/net: move connect to always using async data (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: add iovec recycling (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: cleanup retry path (Jeff Moyer) [RHEL-64867]
  - io_uring: get rid of struct io_rw_state (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: always setup io_async_rw for read/write requests (Jeff Moyer) [RHEL-64867]
  - io_uring/net: drop 'kmsg' parameter from io_req_msg_cleanup() (Jeff Moyer) [RHEL-64867]
  - io_uring/net: add iovec recycling (Jeff Moyer) [RHEL-64867]
  - io_uring/net: remove (now) dead code in io_netmsg_recycle() (Jeff Moyer) [RHEL-64867]
  - io_uring: kill io_msg_alloc_async_prep() (Jeff Moyer) [RHEL-64867]
  - io_uring/net: get rid of ->prep_async() for send side (Jeff Moyer) [RHEL-64867]
  - io_uring/net: get rid of ->prep_async() for receive side (Jeff Moyer) [RHEL-64867]
  - io_uring/net: always set kmsg->msg.msg_control_user before issue (Jeff Moyer) [RHEL-64867]
  - io_uring/net: always setup an io_async_msghdr (Jeff Moyer) [RHEL-64867]
  - io_uring/net: unify cleanup handling (Jeff Moyer) [RHEL-64867]
  - io_uring/net: switch io_recv() to using io_async_msghdr (Jeff Moyer) [RHEL-64867]
  - io_uring/net: switch io_send() and io_send_zc() to using io_async_msghdr (Jeff Moyer) [RHEL-64867]
  - io_uring/alloc_cache: shrink default max entries from 512 to 128 (Jeff Moyer) [RHEL-64867]
  - io_uring: remove timeout/poll specific cancelations (Jeff Moyer) [RHEL-64867]
  - io_uring: flush delayed fallback task_work in cancelation (Jeff Moyer) [RHEL-64867]
  - io_uring: clean up io_lockdep_assert_cq_locked (Jeff Moyer) [RHEL-64867]
  - io_uring: refactor io_req_complete_post() (Jeff Moyer) [RHEL-64867]
  - io_uring: remove current check from complete_post (Jeff Moyer) [RHEL-64867]
  - io_uring: get rid of intermediate aux cqe caches (Jeff Moyer) [RHEL-64867]
  - io_uring: refactor io_fill_cqe_req_aux (Jeff Moyer) [RHEL-64867]
  - io_uring: remove struct io_tw_state::locked (Jeff Moyer) [RHEL-64867]
  - io_uring: force tw ctx locking (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: avoid punting to io-wq directly (Jeff Moyer) [RHEL-64867]
  - RHEL-only: convert READ/WRITE to ITER_DEST/ITER_SOURCE (Jeff Moyer) [RHEL-64867]
  - io_uring: use mempool KASAN hook (Jeff Moyer) [RHEL-64867]
  - skbuff: use mempool KASAN hooks (Jeff Moyer) [RHEL-64867]
  - kasan: rename and document kasan_(un)poison_object_data (Jeff Moyer) [RHEL-64867]
  - kasan: reorder tests (Jeff Moyer) [RHEL-64867]
  - kasan: rename pagealloc tests (Jeff Moyer) [RHEL-64867]
  - kasan: add mempool tests (Jeff Moyer) [RHEL-64867]
  - mempool: introduce mempool_use_prealloc_only (Jeff Moyer) [RHEL-64867]
  - mempool: use new mempool KASAN hooks (Jeff Moyer) [RHEL-64867]
  - mempool: skip slub_debug poisoning when KASAN is enabled (Jeff Moyer) [RHEL-64867]
  - kasan: save alloc stack traces for mempool (Jeff Moyer) [RHEL-64867]
  - kasan: introduce poison_kmalloc_large_redzone (Jeff Moyer) [RHEL-64867]
  - kasan: clean up and rename ____kasan_kmalloc (Jeff Moyer) [RHEL-64867]
  - kasan: save free stack traces for slab mempools (Jeff Moyer) [RHEL-64867]
  - kasan: clean up __kasan_mempool_poison_object (Jeff Moyer) [RHEL-64867]
  - kasan: introduce kasan_mempool_unpoison_pages (Jeff Moyer) [RHEL-64867]
  - kasan: introduce kasan_mempool_poison_pages (Jeff Moyer) [RHEL-64867]
  - kasan: introduce kasan_mempool_unpoison_object (Jeff Moyer) [RHEL-64867]
  - kasan: add return value for kasan_mempool_poison_object (Jeff Moyer) [RHEL-64867]
  - kasan: document kasan_mempool_poison_object (Jeff Moyer) [RHEL-64867]
  - kasan: move kasan_mempool_poison_object (Jeff Moyer) [RHEL-64867]
  - kasan: rename kasan_slab_free_mempool to kasan_mempool_poison_object (Jeff Moyer) [RHEL-64867]
  - net: skbuff: drop the word head from skb cache (Jeff Moyer) [RHEL-64867]
  - io-uring: correct typo in comment for IOU_F_TWQ_LAZY_WAKE (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: early exit thread if task_context wasn't allocated (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: rename is_mapped (Jeff Moyer) [RHEL-64867]
  - io_uring: simplify io_pages_free (Jeff Moyer) [RHEL-64867]
  - io_uring: Fix sqpoll utilization check racing with dying sqpoll (Jeff Moyer) [RHEL-64867]
  - io_uring/net: dedup io_recv_finish req completion (Jeff Moyer) [RHEL-64867]
  - io_uring/net: add io_req_msg_cleanup() helper (Jeff Moyer) [RHEL-64867]
  - io_uring/net: simplify msghd->msg_inq checking (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: rename REQ_F_PARTIAL_IO to REQ_F_BL_NO_RECYCLE (Jeff Moyer) [RHEL-64867]
  - io_uring/net: clear REQ_F_BL_EMPTY in the multishot retry handler (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: statistics of the true utilization of sq threads (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: flag request if buffer pool is empty after buffer pick (Jeff Moyer) [RHEL-64867]
  - io_uring/net: improve the usercopy for sendmsg/recvmsg (Jeff Moyer) [RHEL-64867]
  - io_uring/napi: enable even with a timeout of 0 (Jeff Moyer) [RHEL-64867]
  - io_uring: kill stale comment for io_cqring_overflow_kill() (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: use the correct check for pending task_work (Jeff Moyer) [RHEL-64867]
  - io_uring: wake SQPOLL task when task_work is added to an empty queue (Jeff Moyer) [RHEL-64867]
  - io_uring/napi: ensure napi polling is aborted when work is available (Jeff Moyer) [RHEL-64867]
  - io_uring: Don't include af_unix.h. (Jeff Moyer) [RHEL-64867]
  - io_uring: add register/unregister napi function (Jeff Moyer) [RHEL-64867]
  - io-uring: add sqpoll support for napi busy poll (Jeff Moyer) [RHEL-64867]
  - io-uring: add napi busy poll support (Jeff Moyer) [RHEL-64867]
  - net: add napi_busy_loop_rcu() (Jeff Moyer) [RHEL-64867]
  - net: split off __napi_busy_poll from napi_busy_poll (Jeff Moyer) [RHEL-64867]
  - net/core: Enable socket busy polling on -RT (Jeff Moyer) [RHEL-64867]
  - io-uring: move io_wait_queue definition to header file (Jeff Moyer) [RHEL-64867]
  - io_uring: add support for ftruncate (Jeff Moyer) [RHEL-64867]
  - Add do_ftruncate that truncates a struct file (Jeff Moyer) [RHEL-64867]
  - io_uring: Simplify the allocation of slab caches (Jeff Moyer) [RHEL-64867]
  - io_uring: re-arrange struct io_ring_ctx to reduce padding (Jeff Moyer) [RHEL-64867]
  - io_uring/sqpoll: manage task_work privately (Jeff Moyer) [RHEL-64867]
  - io_uring: pass in counter to handle_tw_list() rather than return it (Jeff Moyer) [RHEL-64867]
  - io_uring: cleanup handle_tw_list() calling convention (Jeff Moyer) [RHEL-64867]
  - io_uring/poll: improve readability of poll reference decrementing (Jeff Moyer) [RHEL-64867]
  - io_uring: remove next io_kiocb fetch in task_work running (Jeff Moyer) [RHEL-64867]
  - io_uring: handle traditional task_work in FIFO order (Jeff Moyer) [RHEL-64867]
  - io_uring: remove 'loops' argument from trace_io_uring_task_work_run() (Jeff Moyer) [RHEL-64867]
  - io_uring/kbuf: cleanup passing back cflags (Jeff Moyer) [RHEL-64867]
  - io_uring/rw: remove dead file == NULL check (Jeff Moyer) [RHEL-64867]
  - io_uring: cleanup io_req_complete_post() (Jeff Moyer) [RHEL-64867]
  - io_uring: mark the need to lock/unlock the ring as unlikely (Jeff Moyer) [RHEL-64867]
  - io_uring/cancel: don't default to setting req->work.cancel_seq (Jeff Moyer) [RHEL-64867]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-552.el9]
changelog:
  - net: inet: do not leave a dangling sk pointer in inet_create() (CKI Backport Bot) [RHEL-72304] {CVE-2024-56601}
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (CKI Backport Bot) [RHEL-72313] {CVE-2024-56600}
  - selftests/futex: Order calls to futex_lock_pi (Čestmír Kalina) [RHEL-60306]
  - locking/rwsem: drop redundant semicolon of down_write_nest_lock (Čestmír Kalina) [RHEL-60306]
  - selftests: futex: Fix 'the the' typo in comment (Čestmír Kalina) [RHEL-60306]
  - selftests: futex: Use variable MAKE instead of make (Čestmír Kalina) [RHEL-60306]
  - asm-generic: qspinlock: Indicate the use of mixed-size atomics (Čestmír Kalina) [RHEL-60306]
  - Documentation: Fix duplicate statement about raw_spinlock_t type (Čestmír Kalina) [RHEL-60306]
  - Documentation: locking: fix references (Čestmír Kalina) [RHEL-60306]
  - asm-generic: qrwlock: Document the spinlock fairness requirements (Čestmír Kalina) [RHEL-60306]
  - Documentation/locking/locktypes: Fix PREEMPT_RT _bh() description (Čestmír Kalina) [RHEL-60306]
  - selftests/futex: fix build for clang (Čestmír Kalina) [RHEL-60306]
  - docs: locking: refer to the actual existing config names (Čestmír Kalina) [RHEL-60306]
  - locking: Make rwsem_assert_held_write_nolockdep() build with PREEMPT_RT=y (Čestmír Kalina) [RHEL-60306]
  - locking: Add rwsem_assert_held() and rwsem_assert_held_write() (Čestmír Kalina) [RHEL-60306]
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Čestmír Kalina) [RHEL-60306]
  - lockdep: Fix lockdep_set_notrack_class() for CONFIG_LOCK_STAT (Čestmír Kalina) [RHEL-60306]
  - locking/pvqspinlock: Correct the type of "old" variable in pv_kick_node() (Čestmír Kalina) [RHEL-60306]
  - lockdep: Add comments for lockdep_set_no{validate,track}_class() (Čestmír Kalina) [RHEL-60306]
  - lockdep: lockdep_set_notrack_class() (Čestmír Kalina) [RHEL-60306]
  - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers (Čestmír Kalina) [RHEL-60306]
  - locktorture: Add MODULE_DESCRIPTION() (Čestmír Kalina) [RHEL-60306]
  - selftests/futex: pass _GNU_SOURCE without a value to the compiler (Čestmír Kalina) [RHEL-60306]
  - selftests/futex: don't pass a const char* to asprintf(3) (Čestmír Kalina) [RHEL-60306]
  - selftests/futex: don't redefine .PHONY targets (all, clean) (Čestmír Kalina) [RHEL-60306]
  - locking/pvqspinlock: Use try_cmpxchg() in qspinlock_paravirt.h (Čestmír Kalina) [RHEL-60306]
  - locking/pvqspinlock: Use try_cmpxchg_acquire() in trylock_clear_pending() (Čestmír Kalina) [RHEL-60306]
  - locking/qspinlock: Use atomic_try_cmpxchg_relaxed() in xchg_tail() (Čestmír Kalina) [RHEL-60306]
  - locking/qspinlock: Always evaluate lockevent* non-event parameter once (Čestmír Kalina) [RHEL-60306]
  - locking/rtmutex: Use try_cmpxchg_relaxed() in mark_rt_mutex_waiters() (Čestmír Kalina) [RHEL-60306]
  - locking/percpu-rwsem: Trigger contention tracepoints only if contended (Čestmír Kalina) [RHEL-60306]
  - lockdep: move held_lock to lockdep_types.h (Čestmír Kalina) [RHEL-60306]
  - locking/seqlock: Split out seqlock_types.h (Čestmír Kalina) [RHEL-60306]
  - selftests: fuxex: Report a unique test name per run of futex_requeue_pi (Čestmír Kalina) [RHEL-60306]
  - locking/mutex: Clarify that mutex_unlock(), and most other sleeping locks, can still use the lock object after it's unlocked (Čestmír Kalina) [RHEL-60306]
  - locking/lockdep: Slightly reorder 'struct lock_class' to save some memory (Čestmír Kalina) [RHEL-60306]
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Čestmír Kalina) [RHEL-60306]
  - asm-generic: ticket-lock: Optimize arch_spin_value_unlocked() (Čestmír Kalina) [RHEL-60306]
  - asm-generic: ticket-lock: New generic ticket-based spinlock (Čestmír Kalina) [RHEL-60306]
  - sched/numa: fix memory leak due to the overwritten vma->numab_state (Phil Auld) [RHEL-70120]
  - mm/kmemleak: fix sleeping function called from invalid context at print message (Alessandro Carminati) [RHEL-72951]
  - vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (Izabela Bakollari) [RHEL-70701]
  - vmxnet3: support higher link speeds from vmxnet3 v9 (Izabela Bakollari) [RHEL-70701]
  - printk: nbcon: Fix illegal RCU usage on thread wakeup (Derek Barbosa) [RHEL-45588]
  - x86/kexec: Add EFI config table identity mapping for kexec kernel (Baoquan He) [RHEL-64872]
  - lsm: remove LSM_COUNT and LSM_CONFIG_COUNT (Ondrej Mosnacek) [RHEL-12439]
  - lsm: replace indirect LSM hook calls with static calls (Ondrej Mosnacek) [RHEL-12439]
  - lsm: count the LSMs enabled at compile time (Ondrej Mosnacek) [RHEL-12439]
  - kernel: Add helper macros for loop unrolling (Ondrej Mosnacek) [RHEL-12439]
  - init/main.c: Initialize early LSMs after arch code, static keys and calls. (Ondrej Mosnacek) [RHEL-12439]
  - lsm: cleanup lsm_hooks.h (Ondrej Mosnacek) [RHEL-12439]
  - lsm: use default hook return value in call_int_hook() (Ondrej Mosnacek) [RHEL-12439]
  - lsm: fix default return value of the socket_getpeersec_*() hooks (Ondrej Mosnacek) [RHEL-12439]
  - lsm: fix the logic in security_inode_getsecctx() (Ondrej Mosnacek) [RHEL-12439 RHEL-16573]
  - lsm: don't yet account for IMA in LSM_CONFIG_COUNT calculation (Ondrej Mosnacek) [RHEL-12439]
  - LSM: Maintain a table of LSM attribute data (Ondrej Mosnacek) [RHEL-12439]
  - LSM: Identify modules by more than name (Ondrej Mosnacek) [RHEL-12439]
  - lsm: fix default return value for inode_getsecctx (Ondrej Mosnacek) [RHEL-12439 RHEL-16573]
  - lsm: fix default return value for vm_enough_memory (Ondrej Mosnacek) [RHEL-12439]
  - selinux: update comment on selinux_hooks[] (Ondrej Mosnacek) [RHEL-12439]
  - security: Allow all LSMs to provide xattrs for inode_init_security hook (Ondrej Mosnacek) [RHEL-12439]
  - selinux: cleanup exit_sel_fs() declaration (Ondrej Mosnacek) [RHEL-12439]
  - selinux: avc: drop unused function avc_disable() (Ondrej Mosnacek) [RHEL-12439]
  - selinux: clean up dead code after removing runtime disable (Ondrej Mosnacek) [RHEL-12439]
  - security: Remove security_old_inode_init_security() (Ondrej Mosnacek) [RHEL-12439]
  - selinux: remove the runtime disable functionality (Ondrej Mosnacek) [RHEL-12439]
  - smack: Remove the redundant lsm_inode_alloc (Ondrej Mosnacek) [RHEL-12439]
  - mm/slub: Avoid list corruption when removing a slab from the full list (Rafael Aquini) [RHEL-72310] {CVE-2024-56566}
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Benjamin Poirier) [RHEL-47128]
  - lib: cpu_rmap: Use allocator for rmap entries (Benjamin Poirier) [RHEL-47128]
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Benjamin Poirier) [RHEL-47128]
  - mm/mm_init: Fix incorrect alignment between deferred_free_pages() & deferred_free_range() (Waiman Long) [RHEL-72551]
  - netlink: typographical error in nlmsg_type constants definition (CKI Backport Bot) [RHEL-73152]
  - net: restrict SO_REUSEPORT to inet sockets (Paolo Abeni) [RHEL-73121]
  - net: defer final 'struct net' free in netns dismantle (Paolo Abeni) [RHEL-73121] {CVE-2024-56658}


