# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10]
changelog:
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]
  - kselftest/arm64: Handle attempts to disable SM on SME only systems (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Test SME on SME only systems in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Cast start/end markers to char *, not u64 (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Cover disabling streaming mode without SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Don't open code SVE_PT_SIZE() in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Fix SVE write data generation for SME only systems (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Test FPSIMD format data writes via NT_ARM_SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftst/arm64: Test NT_ARM_SVE FPSIMD format writes on non-SVE systems (Steve Dunnagan) [RHEL-158921]
  - arm64/sysreg: Replace TCR_EL1 field macros (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Represent physical memory with phys_addr_t and resource_size_t (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Make map_fdt() return mapped pointer (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: signal: Fix restoration of SVE context (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: ptrace: Fix SVE writes on !SME systems (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() (Steve Dunnagan) [RHEL-158921]
  - arm64/gcs: Flush the GCS locking state on exec (Steve Dunnagan) [RHEL-158921]
  - arm64/sysreg: Remove unused define ARM64_FEATURE_FIELD_BITS (Steve Dunnagan) [RHEL-158921]
  - arm64/sme: Support disabling streaming mode via ptrace on SME only systems (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix typos and spelling errors in comments (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix double word in comments (Steve Dunnagan) [RHEL-158921]
  - arm64: atomics: lse: Remove unused parameters from ATOMIC_FETCH_OP_AND macros (Steve Dunnagan) [RHEL-158921]
  - arm64: remove duplicate ARCH_HAS_MEM_ENCRYPT (Steve Dunnagan) [RHEL-158921]
  - arm64: add unlikely hint to MTE async fault check in el0_svc_common (Steve Dunnagan) [RHEL-158921]
  - arm64: acpi: add newline to deferred APEI warning (Steve Dunnagan) [RHEL-158921]
  - arm64/mm: Ensure PGD_SIZE is aligned to 64 bytes when PA_BITS = 52 (Steve Dunnagan) [RHEL-158921]
  - arm64/mm: Drop cpu_set_[default|idmap]_tcr_t0sz() (Steve Dunnagan) [RHEL-158921]
  - arm64: remove unused ARCH_PFN_OFFSET (Steve Dunnagan) [RHEL-158921]
  - arm64: use SOFTIRQ_ON_OWN_STACK for enabling softirq stack (Steve Dunnagan) [RHEL-158921]
  - arm64: Remove assertion on CONFIG_VMAP_STACK (Steve Dunnagan) [RHEL-158921]
  - uaccess: Provide ASM GOTO safe wrappers for unsafe_*_user() (Steve Dunnagan) [RHEL-158921]
  - arm64: uaccess: Use unsafe wrappers for ASM GOTO (Steve Dunnagan) [RHEL-158921]
  - igc: fix typos in comments (Michal Schmidt) [RHEL-186597]
  - igc: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-186597]
  - igc: skip RX timestamp header for frame preemption verification (Michal Schmidt) [RHEL-186597]
  - igc: fix potential skb leak in igc_fpe_xmit_smd_frame() (Michal Schmidt) [RHEL-186597]
  - igc: set tx buffer type for SMD frames (Michal Schmidt) [RHEL-186597]
  - net: Consistently define pci_device_ids using named initializers [igc] (Michal Schmidt) [RHEL-186597]
  - igc: fix page fault in XDP TX timestamps handling (Michal Schmidt) [RHEL-186597]
  - igc: fix missing update of skb->tail in igc_xmit_frame() (Michal Schmidt) [RHEL-186597]
  - igc: Fix trigger of incorrect irq in igc_xsk_wakeup function (Michal Schmidt) [RHEL-186597]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [igc] (Michal Schmidt) [RHEL-186597]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igc] (Michal Schmidt) [RHEL-186597]
  - igb: fix typos in comments (Michal Schmidt) [RHEL-177449]
  - igb: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-177449]
  - igb: use ktime_get_real helpers in igb_ptp_reset() (Michal Schmidt) [RHEL-177449]
  - net: Consistently define pci_device_ids using named initializers [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - igb: remove napi_synchronize() in igb_down() (Michal Schmidt) [RHEL-177449]
  - igb: Fix trigger of incorrect irq in igb_xsk_wakeup (Michal Schmidt) [RHEL-177449]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [igb] (Michal Schmidt) [RHEL-177449]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - igb: Switch to use %ptSp (Michal Schmidt) [RHEL-177449]
  - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175863] {CVE-2024-53143}
  - scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141216] {CVE-2026-46105}
  - scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141215] {CVE-2026-43473}
  - scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141215]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-257.el10]
changelog:
  - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
  - wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
  - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
  - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
  - rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
  - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
  - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
  - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
  - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
  - PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
  - PCI: Align head space better (Myron Stowe) [RHEL-178011]
  - PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
  - parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
  - MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
  - resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
  - resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
  - PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
  - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
  - resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
  - resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
  - kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
  - resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
  - resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
  - resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
  - resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
  - selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
  - dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
  - tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
  - tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
  - tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
  - tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
  - tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
  - tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
  - tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
  - net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
  - net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
  - selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
  - selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
  - redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-258.el10]
changelog:
  - i2c: core: fix adapter deregistration race (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: disable runtime PM on adapter registration failure (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix adapter debugfs creation (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix adapter probe deferral loop (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix NULL-deref on adapter registration failure (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix hang on adapter registration failure (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix irq domain leak on adapter registration failure (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - i2c: core: fix reference leak in i2c_register_adapter() (Steve Best) [RHEL-222908] {CVE-2026-64279}
  - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223371] {CVE-2026-64496}
  - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-222799]
  - mfd: intel-lpss: Add Intel Nova Lake-H PCI IDs (Steve Best) [RHEL-154489]
  - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222496] {CVE-2026-64531}
  - mei: bus: access mei_device under device_lock on cleanup (Steve Best) [RHEL-222295]
  - PM: EM: Fix incorrect description of the cost field in struct em_perf_state (Steve Best) [RHEL-220528]
  - PM: EM: Fix late boot with holes in CPU topology (Steve Best) [RHEL-220528]
  - soc/tegra: fuse: Fix spurious straps warning on SMCCC platforms (Charles Mirabile) [RHEL-191743]
  - pinctrl-amd: Don't clear S4 wake bits at probe (Steve Best) [RHEL-212012]
  - tools/power/x86/intel-speed-select: Harden daemon pidfile open (Steve Best) [RHEL-214504]
  - gve: fix netdev_lock deadlock in gve_add_napi by using netif_napi_set_irq_locked (Younes Nejahi) [RHEL-218195]
  - platform/x86: intel: Add notifiers support (Steve Best) [RHEL-215232]
  - platform/x86: intel: Move debugfs register before creating devices (Steve Best) [RHEL-215232]
  - platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery (Steve Best) [RHEL-213934]
  - platform/x86/intel/vsec: Make driver_data info const (Steve Best) [RHEL-213934]
  - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179577] {CVE-2026-45991}
  - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213327] {CVE-2026-63807}
  - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213327]
  - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213327]
  - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213327]
  - cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() (Steve Best) [RHEL-212894]
  - thermal: intel: Fix dangling resources on thermal_throttle_online() failure (Steve Best) [RHEL-212369]
  - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug (Steve Best) [RHEL-212368]
  - x86/mm: Disable broadcast TLB flush when PCID is disabled (Rafael Aquini) [RHEL-179500]
  - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189572] {CVE-2025-71072}
  - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-193649]
  - mm/mempolicy: fix weighted interleave auto sysfs name (Waiman Long) [RHEL-193649]
  - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-193649]
  - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183605] {CVE-2025-10263}
  - ipmi:ssif: NULL thread on error (Dennis Chen) [RHEL-187338]
  - ipmi:si: Return state to normal if message allocation fails (Dennis Chen) [RHEL-187338]
  - ipmi: Add limits to event and receive message requests (Dennis Chen) [RHEL-187338]
  - ipmi: Check event message buffer response for bad data (Dennis Chen) [RHEL-187338]
  - docs: ipmi: fix spelling and grammar mistakes (Dennis Chen) [RHEL-187342]
  - Documentation:ipmi: Remove comments about interrupt level (Dennis Chen) [RHEL-187342]
  - dt-bindings: ipmi: Convert aspeed,ast2400-ibt-bmc to DT schema (Dennis Chen) [RHEL-187342]
  - dt-bindings: ipmi: Convert nuvoton,npcm750-kcs-bmc to DT schema (Dennis Chen) [RHEL-187342]
  - dt-bindings: ipmi: aspeed,ast2400-kcs-bmc: Add missing "clocks" property (Dennis Chen) [RHEL-187342]
  - ice: remove redundant checks from PTP init (Michal Schmidt) [RHEL-187013]
  - ice: implement E825 TX ref clock control and TXC hardware sync status (Michal Schmidt) [RHEL-187013]
  - ice: add Tx reference clock index handling to AN restart command (Michal Schmidt) [RHEL-187013]
  - ice: implement CPI support for E825C (Michal Schmidt) [RHEL-187013]
  - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Michal Schmidt) [RHEL-187013]
  - ice: fix missing priority callbacks for U.FL DPLL pins (Michal Schmidt) [RHEL-187013]
  - ice: restore PTP Rx timestamp config after ethtool set-channels (Michal Schmidt) [RHEL-187013]
  - ice: ptp: use primary NAC semaphore on E825 (Michal Schmidt) [RHEL-187013]
  - ice: ptp: serialize E825 PHY timer start with PTP lock (Michal Schmidt) [RHEL-187013]
  - ice: fix setting promisc mode while adding VID filter (Michal Schmidt) [RHEL-187013]
  - ice: fix VF queue configuration with low MTU values (Michal Schmidt) [RHEL-187013]
  - ice: fix locking around wait_event_interruptible_locked_irq (Michal Schmidt) [RHEL-187013]
  - ice: dpll: Fix compilation warning (Michal Schmidt) [RHEL-187013]
  - ice: mention fw_activate action along with devlink reload (Michal Schmidt) [RHEL-187013]
  - wifi: nl80211: re-check wiphy netns in testmode and vendor dump continuations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - dt-bindings: wireless: ath10k: Add quirk to skip host cap QMI requests (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: fix typo rx_freq_frome_ie (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: fix resource leak in probe error path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: correct drop logic for malformed AMPDU frames (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtl818x: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath6kl: rename disconnect callback (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath6kl: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: libertas_tf: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: libertas: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-52947}
  - wifi: cfg80211: enforce HE/EHT cap/oper consistency (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53257}
  - wifi: fix leak if split 6 GHz scanning fails (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53258}
  - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53182}
  - wifi: iwlwifi: pcie: simplify the resume flow if fast resume is not used (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: avoid oversized UATS command copy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: send tx power constraints before link activation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: don't support the reset handshake for old firmwares (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: wext: validate chandef in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: consume only present negotiated TTLM maps (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: wilc1000: fix dma_buffer leak on bus acquire failure (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: don't override max_amsdu_subframes (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: clear shared SRNG pointer state on restart (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix peer resolution on rx path when peer_id=0 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: disconnect only after 6 beacons without Rx (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o BSS vif (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: use correct function to read STEP_URM register (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: stop TX during firmware restart (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath10k: skip WMI and beacon transmission when device is wedged (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix error path leaks in some WMI calls (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix error path leaks in some WMI WOW calls (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: re-check wiphy netns in nl80211_prepare_wdev_dump() continuation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: require CAP_NET_ADMIN over the target netns in SET_WIPHY_NETNS (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: fix NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST usage (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: initialize RSSI dBm conversion event state (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: fix leak in some ath12k_wmi_xxx() functions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: tests: mark HT check strict (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: check ieee80211_rx_data_set_link return in pubsta MLO path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: require admin perm on SET_PMK / DEL_PMK (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-46180}
  - wifi: mac80211: skip ieee80211_verify_sta_ht_mcs_support check in non-strict mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: use lockdep_assert_in_rcu_read_lock() for RCU assertions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: fix OF node refcount imbalance in WSI graph traversal (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - net: use get_random_u{16,32,64}() where appropriate [wireless] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: Explicitly include <linux/export.h> in michael-mic.c (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath10k: Add device-tree quirk to skip host cap QMI requests (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Use michael_mic() from cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: Use michael_mic() from cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211, cfg80211: Export michael_mic() and move it to cfg80211 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Enable IPQ5424 WiFi device support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Add CE remap hardware parameters for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: add ath12k_hw_regs for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: add ath12k_hw_version_map entry for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Add ath12k_hw_params for IPQ5424 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Create symlink for each radio in a wiphy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Skip adding inactive partner vdev info (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Support channel change stats (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Rename hw_link_id to radio_idx in ath12k_ah_to_ar() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: enable MLO support for 4-address mode interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: use ap_addr for 4-address NULL frame destination (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: synchronize valid links for WDS AP_VLAN interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: remove unused variables in minstrel_ht_alloc_sta (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: brcmfmac: silence warning for non-existent, optional firmware (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: wilc1000: use kzalloc_flex (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: brcmfmac: of: defer probe for MAC address (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: brcmfmac: Fix error pointer dereference (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53093}
  - wifi: mac80211: allow add_key on NAN interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: report and drop spurious NAN Data frames (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: allow block ack agreements in NAN Data (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Accept frames on NAN DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add support for TX over NAN_DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: update NAN data path state on schedule changes (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add NAN peer schedule support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: support NAN stations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: handle reconfig for NAN DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: support open and close for NAN_DATA interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add NAN local schedule support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: run NAN DE code only when appropriate (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: export ieee80211_calculate_rx_timestamp (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ieee80211: add more NAN definitions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add a TXQ for management frames on NAN devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: usb: fix TX flow control by tracking in-flight URBs (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Add support for Elecom WDC-XE2402TU3-B (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add PCI ID of RTL8922DE and RTL8922DE-VS (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add chip_info and chip_ops struct (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add ops related to BT coexistence mechanism (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add RF ops of init hardware and get thermal (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: configure TX/RX path assisting in BT coexistence (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set TX power callback (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add RF calibration ops (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set channel with pre-/post- helpers (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: BB hardware pre-/post-init, TX/RX path and power settings (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: fix typo "frome" -> "from" in rx_freq_frome_ie (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Fill fw_version member of struct wiphy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: Fill fw_version member of struct wiphy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: coex: Ignore BT info byte 5 from RTL8821A (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: fw: load TX power elements according to AID (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: phy: load RF parameters relying on ACV for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: phy: expand PHY page for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: mac: disable pre-load function for RTL8922DE (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: mac: add specific case to dump mac memory for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: pci: clear SER ISR when initial and leaving WoWLAN for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: wow: enable MLD address for Magic packet wakeup (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: wow: use struct style to fill WOW wakeup control H2C command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set channel of RF part (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set channel of BB part (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add set channel of MAC part (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: read and configure RF by calibration data from efuse physical map (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: define efuse map and read necessary fields (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add power on/off functions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8922d: add definition of quota, registers and efuse block (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: validate RX rate to prevent out-of-bound (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Add support for Buffalo WI-U3-2400XE2 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Add support for TP-Link Archer TX50U (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: retry efuse physical map dump on transient failure (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: TX QOS Null data the same way as Null data (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: add quirks to disable PCI ASPM and deep LPS for HP P3S95EA#ACB (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - net: qrtr: fix endian handling of confirm_rx field (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: ignore reserved bits in reconfiguration status (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: allow protected action frame TX for NAN (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ieee80211: Add some missing NAN definitions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: Add a notification to notify NAN channel evacuation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: add NL80211_CMD_NAN_ULW_UPDATE notification (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: allow reporting spurious NAN Data frames (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: allow ToDS=0/FromDS=0 data frames on NAN data interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: define an API for configuring the NAN peer's schedule (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: add support for NAN stations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: separately store HT, VHT and HE capabilities for NAN (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: add support for NAN data interface (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: make sure NAN chandefs are valid (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: Add an API to configure local NAN schedule (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: cleanup error path of ieee80211_do_open (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: extract channel logic from link logic (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: set RX_FLAG_RADIOTAP_TLV_AT_END generically (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: reduce the number of prints upon firmware crash (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: fix the description of SESSION_PROTECTION_CMD (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: introduce iwl_mld_vif_fw_id_valid (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: block EMLSR during TDLS connections (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: TLC_MNG_CONFIG_CMD can use several structures (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: update the TLC when we deactivate a link (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: add a macro for max FW links (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: always assign a fw id to a vif (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: use the dedicated helper to extract a link (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: add MAC context command version 4 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: handle NULL/ERR returns from ptp_clock_register() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: add double-include guards to nan.h (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: make alloc functions not forced static (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: rename iwl_mld_phy_from_mac80211() argument (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: remove type argument from iwl_mld_add_sta() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: make iwl_mld_mac80211_iftype_to_fw() static (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: pcie: don't dump on reset handshake in dump (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: use IWL_FW_CHECK for sync timeout (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: add BIOS revision compatibility check for PPAG command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: validate the channels received in iwl_mcc_update_resp_v* (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: add CQM event support for per-link RSSI changes (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: eliminate duplicate WIDE_ID in PPAG command handling (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: fw: Add TLV support for BIOS revision of command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: support changing iftype at runtime (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: set UHR MCS in RX status (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: enable UHR in TLC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: remove SCAN_TIMEOUT_MSEC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: remove IWL_MAX_WD_TIMEOUT (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: mode the comments valid kerneldoc comments (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: support PER_CHAIN_LIMIT_OFFSET_CMD v6 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: add support for WGDS revision 4 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: validate the WGDS table (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: add support for WGDS rev4 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: open code the parsing of the WGDS table (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: support version 11 of REDUCE_TX_POWER_CMD (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: add support for EWRD rev 3 table (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: add support for WRDS rev 3 table (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: support the new WRDS and EWRD tables (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: zero iwl_geo_tx_power_profiles_cmd before sending (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: restrict TOP reset to some devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: add support for PPAG table rev5 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: add support for PPAG rev5 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: check the size of the ACPI PPAG tables (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: regulatory: support a new command for PPAG (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: add support for sta command version 3 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: bring iwl_fill_ppag_table to the iwlmvm (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: open code the PPAG table store operation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: Introduce scan command version 18 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: Refactor scan command handling (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: remove unused scan expire time constants (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: cleanup some more MLO code (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: acpi: better use ARRAY_SIZE than a define (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: uefi: decouple UEFI and firmware APIs (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: ensure we don't read SAR values past the limit (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mld: add support for iwl_mcc_allowed_ap_type_cmd v2 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: mvm: replace use of system_wq with system_percpu_wq (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: fw: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: iwlwifi: replace use of system_unbound_wq with system_dfl_wq (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Destroy active sta links in mt7996_mac_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Add mcu APIs to enable/disable vif links. (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Destroy vif active links in mt7996_remove_interface() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Move mlink deallocation in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Account active links in valid_links fields (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Rely on msta_link link_id in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix frequency separation for station STR mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: host-only unwind published links on add failure (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: publish msta->link after successful link add (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: switch link STA allocation to RCU lifetime (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: move WCID teardown into link_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: drop WCID reinit after publish (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: unwind WCID setup on link STA add failure (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: make WCID cleanup unconditional in sta_remove_links() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mconf and mlink to wtbl_update_hdr_trans() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: resolve link after acquiring mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to set_link_key() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to wtbl_update_hdr_trans() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: validate mlink in sta_hdr_trans_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to sta_hdr_trans_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to mac_link_sta_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: resolve primary mlink via def_wcid (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to mcu_sta_update() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink and mconf to sta_mld_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass WCID indices to bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: pass mlink to sta_amsdu_tlv() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix issues with manually triggered radar detection (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: adjust timeout value for boot-up calibration commands (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: update WFSYS reset flow for MT7990 chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: support critical packet mode for MT7990 chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix RRO EMU configuration (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: add per-link beacon monitoring for MLO (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: wait for firmware TX completion of mgmt frames before channel switch (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: route nullfunc frames to PSD/ALTX queue (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: flush pending TX before channel switch (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: send nullfunc PS frames on offchannel transitions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: optimize ROC for same-channel case (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: abort ROC on chanctx changes (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: check chanctx before restoring channel after ROC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: add offchannel check to mt76_roc_complete (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: support upgrading passive scans to active (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: fix multi-radio on-channel scanning (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Decrement sta counter removing the link in mt7996_mac_reset_sta_iter() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Remove unnecessary phy filed in mt7996_vif_link struct (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Remove link pointer dependency in mt7996_mac_sta_remove_links() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Add missing CHANCTX_STA_CSA property (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: fix incorrect TLV length in CLC command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: add missing lock protection in mt76_sta_state for sta_event callback (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: fix 6GHz regulatory update on connection (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Disable Rx hdr_trans in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Add eMLSR support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53097}
  - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53098}
  - wifi: mt76: don't return TXQ when exceeding max non-AQL packets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix queue pause after scan due to wrong channel switch reason (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: avoid to set ACK for MCU command if wait_resp is not set (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix wrong DMAD length when using MAC TXP (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: add MT7902 SDIO device support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: add MT7902 PCIe device support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: add MT7902 WFDMA prefetch configuration (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: add MT7902 MCU support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: ensure MCU ready before ROM patch download (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: add PSE handling barrier for the large MCU cmd (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: connac: mark MT7902 as hw txp devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: add MT7902e DMA layout support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: handle MT7902 irq_map quirk with mutable copy (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: use mt76_for_each_q_rx() in reset path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: connac: use is_connac2() to replace is_mt7921() checks (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: apply calibration-free data from OTP (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: add variant for MT7992 chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: add external EEPROM support for mt799x chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: don't consider the sband when processing capabilities (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: properly handle error in ieee80211_add_virtual_monitor (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: support UNII-9 channels in ieee80211_channel_to_freq_khz (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: make ieee80211_find_chanctx link-unaware (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211_hwsim: advertise basic UHR support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: use for_each_chanctx_user_* in one more place (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: Add support for additional 7 GHz channels (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Replace strncpy() with strscpy_pad() in drv_switch_vif_chanctx tracepoint (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: fix backoff fields and max_power calculation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: Replace deprecated PCI function (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: increase txq memory limit to 32 MiB (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: reset device after MCU message timeout (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: fix deadlock in remain-on-channel (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53100}
  - wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53101}
  - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: fix tx power setting failure after chip reset (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53102}
  - wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53103}
  - wifi: mt76: mt7925: Skip scan process during suspend. (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: drop puncturing handling from BSS change path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: Fix memory leak destroying device (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53104}
  - wifi: mt76: mt7921: fix a potential clc buffer length underflow (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-46136}
  - wifi: mt76: mt7921: Place upper limit on station AID (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53317}
  - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53105}
  - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53318}
  - wifi: mt76: fix list corruption in mt76_wcid_cleanup (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: fix incorrect length field in txpower command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: add support for ERP CTS & HT protection (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7915: fix use_cts_prot support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7615: fix use_cts_prot support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt7601u: check multiple firmware paths (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt792x: Fix a potential deadlock in high-load situations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Reset ampdu_state state in case of failure in mt7996_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Switch to the secondary link if the default one is removed (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Reset mtxq->idx if primary link is removed in mt7996_vif_link_remove() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: Set mtxq->wcid just for primary link (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: introduce CSA support in non-MLO mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt76x02: wake queues after reconfig (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix iface combination for different chipsets (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: add duplicated WTBL command (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: offload radar threshold initialization (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: abort CCA when CSA is starting (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: set specific BSSINFO and STAREC commands after channel switch (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: fix the behavior of radar detection (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mt76: mt7996: extend CSA and CCA support for MLO (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: use int for band coming from netlink (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fix STA link removal during link removal (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: usb: Rx aggregation for RTL8832CU/RTL8851BU (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Remove unused DFS Unit Test definitions (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Clean up the WMI Unit Test command interface (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: debug: simulate Wi-Fi 7 SER L0/L1 without PS mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Recalculate station aggregates when AMSDU length changes for MLO links (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Drop malformed AMPDU frames with abnormal PN (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: replace RF mutex with wiphy lock assertion (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: wow: add retry for ensuring packet are processed (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: chan: recalc MLO DBCC mode based on current entity mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: chan: simplify link handling related to ROC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: tweak settings of TX power and channel for Wi-Fi 7 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: move disabling dynamic mechanism functions to core (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: phy: limit AMPDU number for RA try rate (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: mac: remove A-die off setting for RTL8852C and RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: pci: update SER parameters for suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtlwifi: rtl8192d: fix typo in H2C wait counter names (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtlwifi: usb: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: fix device leak on probe failure (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-31604}
  - wifi: rtl8xxxu: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtl8xxxu: fix potential use of uninitialized value (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtl8xxxu: Mark RTL8188ETV (0bda:0179) as tested (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: reject S1G/60G with HT chantype (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ieee80211: fix definition of EHT-MCS 15 in MRU (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: check non-S1G width with S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: restrict cfg80211_chandef_create() to only HT-based bands (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: don't use cfg80211_chandef_create() for default chandef (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Remove deleted sta links in ieee80211_ml_reconf_work() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: split control freq check from chandef check (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: always use full chanctx compatible check (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: refactor chandef tracing macros (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: validate HE 6 GHz operation when EHT is used (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: split out UHR operation information (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Use .mbn firmware for AHB devices (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath10k: rename disconnect callback (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath10k: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath9k: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Fix legacy rate mapping for monitor mode capture (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Fix the assignment of logical link index (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: account TX stats only when ACK/BA status is present (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mwifiex: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rt2x00: drop redundant device reference (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211_hwsim: add incumbent signal interference detection support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: Add SPDX ids to some files in the wireless subsystem (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: add support for NDP ADDBA/DELBA for S1G (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ieee80211: fix UHR operation DBE vs. P-EDCA order (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: remove AID bit stripping for print (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: remove stale TODO item (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: move action code from per-type frame structs (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: UHR: define DPS/DBE/P-EDCA elements and fix size parsing (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211_hwsim: change hwsim_class to a const struct (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: give the AP more time for EPPKE as well (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53112}
  - wifi: rtw88: check for PCI upstream bridge existence (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-46092}
  - wifi: rtw89: ser: post-recover DMAC state to prevent LPS (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: ser: Wi-Fi 7 reset HALT C2H after reading it (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: debug: add SER SW counters to count simulation (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: rfk: add hardware version to rtw89_fw_h2c_rf_pre_ntfy_mcc for new WiFi 7 firmware (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: add H2C command to protect TX/RX for unused PHY (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8851b: update supported firmware format to 1 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8852a: update supported firmware format to 1 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8852a: move DIG tables to rtw8852a.c (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: 8852b: update supported firmware format to 2 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: add general way to generate module firmware string (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: fw: recognize firmware type B by AID (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: fw: add fw_def struct to put firmware name and format version (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw88: coex: Solve LE-HID lag & update coex version to 26020420 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rtw89: Turbo mode for RTL8851BU/RTL8852BU (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Remove the unused argument from the Rx data path (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Enable monitor mode support on IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: Set up MLO after SSR (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: Silence remoteproc probe deferral prints (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: support key installation on non-netdev wdevs (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: make cluster id an array (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: update outdated comment (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Advertise IEEE 802.1X authentication support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Add support for IEEE 802.1X authentication protocol in non-AP STA mode (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: add support for IEEE 802.1X Authentication Protocol (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Advertise EPPKE support based on driver capabilities (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211_hwsim: Advertise support for (Re)Association frame encryption (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Fix AAD/Nonce computation for management frames with MLO (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: rt2x00: use generic nvmem_cell_get (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fetch unsolicited probe response template by link ID (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: fetch FILS discovery template by link ID (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: don't allow DFS channels for NAN (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: refactor wiphy_suspend (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211/cfg80211: support stations of non-netdev interfaces (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: remove unneeded call to cfg80211_leave (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: nl80211: refactor nl80211_parse_chandef (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: add support to handle incumbent signal detected event from mac80211/driver (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: Set link ID for NULL packets sent to probe stations (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mac80211: set band information only for non-MLD when probing stations using NULL frame (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-46069}
  - wifi: mac80211_hwsim: background CAC support (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: events, report background radar (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: set and report chandef CAC ongoing (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: cfg80211: fix background CAC (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath11k: fix memory leaks in beacon template setup (Jose Ignacio Tornos Martinez) [RHEL-184812] {CVE-2026-53113}
  - wifi: ath12k: add basic hwmon temperature reporting (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath12k: fix indentation in ath12k_qmi_aux_uc_load() (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - wifi: ath9k: Fix typo (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [mac80211] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [mac80211] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [mac80211] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [mac80211] (Jose Ignacio Tornos Martinez) [RHEL-184812]
  - bus: mhi: host: pci_generic: Add Telit FE912C04 modem support (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: ep: Test for non-zero return value where applicable (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: Use kzalloc_flex (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Add pm_runtime_forbid() in remove callback (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Add NMEA channels to FN920C04 and FN990A (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Enable IP_SW and IP_ETH channels for Qcom QDU100 device (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - bus: mhi: host: pci_generic: Add Qualcomm SDX35 modem (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [mhi] (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [mhi] (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [mhi] (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [mhi] (Jose Ignacio Tornos Martinez) [RHEL-184811]
  - redhat: configs: rhel: Enable AMD ISP4 config (Kate Hsuan) [RHEL-23291]
  - Documentation: add documentation of AMD isp 4 driver (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: add DRM_AMDGPU dependency (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: isp4: drop stale list reinit before free (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: isp4 debug fs logging and more descriptive errors (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: isp4 video node and buffers handling added (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: isp4 subdev and firmware loading handling added (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: Add isp4 fw and hw interface (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: low level support for isp4 firmware (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: platform: amd: Introduce amd isp4 capture driver (Kate Hsuan) [RHEL-162129 RHEL-23291]
  - media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() (Kate Hsuan) [RHEL-162129]
  - media: pci: intel: Add CVS support for IPU bridge driver (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Only do uvc_video_get_time() if needed (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Do not add samples if dev_sof has not changed (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Do not add clock samples with small sof delta (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Relax the constrains for interpolating the hw clock (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Use hw timestaming if the clock buffer is full (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix dev_sof filtering in hw timestamp (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Avoid partial metadata buffers (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Do not open code uvc_queue_get_current_buffer (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: add v4l2_fill_pixfmt_mp_aligned helper (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: add has_alpha to v4l2_format_info (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: add missing 1 and 2 byte RGB formats to v4l2_format_info (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: sort RGB formats in v4l2_format_info (Kate Hsuan) [RHEL-162129]
  - media: Use named initializers for arrays of i2c_device_data (Kate Hsuan) [RHEL-162129]
  - media: pwc: Drain fill_buf on start_streaming() failure (Kate Hsuan) [RHEL-162129]
  - media: ov13b10: Support multiple regulators (Kate Hsuan) [RHEL-162129]
  - media: cec: core: add LIP support (Kate Hsuan) [RHEL-162129]
  - media: include/uapi/linux/cec*: clarify which msgs are CEC 2.0 (Kate Hsuan) [RHEL-162129]
  - media: include/uapi/linux/cec*.h: add CEC LIP support (Kate Hsuan) [RHEL-162129]
  - media: pwc: Return queued buffers on start_streaming() failure (Kate Hsuan) [RHEL-162129]
  - media: v4l2-dev: Add range check for vdev->minor (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Introduce allow_privacy_override module parameter (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Announce deprecation intentions for UVCIOC_CTRL_MAP (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Import standard controls from uvcdynctrl (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix buffer sequence in frame gaps (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix sequence number when no EOF (Kate Hsuan) [RHEL-162129]
  - media: v4l2-subdev: Allow accessing routes with STREAMS client capability (Kate Hsuan) [RHEL-162129]
  - media: v4l2-subdev: Refactor returning routes (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: Always register clock with device-specific name (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() (Kate Hsuan) [RHEL-162129]
  - media: cx231xx: fix devres lifetime (Kate Hsuan) [RHEL-162129]
  - media: vb2: use ssize_t for vb2_read/vb2_write (Kate Hsuan) [RHEL-162129]
  - media: gspca: Fix comment in sd_init() (Kate Hsuan) [RHEL-162129]
  - media: s2255: refactor endpoint lookup (Kate Hsuan) [RHEL-162129]
  - media: gspca: refactor endpoint lookup (Kate Hsuan) [RHEL-162129]
  - media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping ranges (Kate Hsuan) [RHEL-162129]
  - media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicely (Kate Hsuan) [RHEL-162129]
  - media: v4l2-common: Add YUV24 format info (Kate Hsuan) [RHEL-162129]
  - media: v4l2-controls: Add control for background detection (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: validate HEVC active reference counts (Kate Hsuan) [RHEL-162129]
  - Revert "media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935" (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix bug in error path of uvc_alloc_urb_buffers (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov5675: Wait for endpoint (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Add support for P010 pixel format (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Add D436 and D555 cameras metadata support (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Change comment to 'Intel RealSense' (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Add a stream backpointer in uvc_video_queue (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Allow userspace to increase the meta buffersize (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: uvc_queue_to_stream(): Support meta queues (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream (Kate Hsuan) [RHEL-162129]
  - media: subdev: Split v4l2_subdev_get_frame_desc_passthrough() into locked and unlocked (Kate Hsuan) [RHEL-162129]
  - media: subdev: Improve v4l2_subdev_get_frame_desc_passthrough() kdoc (Kate Hsuan) [RHEL-162129]
  - media: subdev: Minor v4l2_subdev_get_frame_desc_passthrough() cleanups (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov8856: parse and register V4L2 device tree properties (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov8856: free control handler on error in ov8856_init_controls() (Kate Hsuan) [RHEL-162129] {CVE-2026-53379}
  - media: v4l2-subdev: Fix error check in v4l2_subdev_get_frame_desc_passthrough() (Kate Hsuan) [RHEL-162129]
  - media: v4l2-fwnode: Return -EPROBE_DEFER on parsing NULL endpoints (Kate Hsuan) [RHEL-162129]
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Kate Hsuan) [RHEL-162129] {CVE-2026-31473}
  - media: rc: fix race between unregister and urb/irq callbacks (Kate Hsuan) [RHEL-162129]
  - media: streamzap: fix race between device disconnection and urb callback (Kate Hsuan) [RHEL-162129] {CVE-2025-22027}
  - media: cx231xx: Fix AGC levels for NTSC-M (Kate Hsuan) [RHEL-162129]
  - media: cx25840: Fix NTSC-J, PAL-N, and SECAM standards (Kate Hsuan) [RHEL-162129]
  - media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935 (Kate Hsuan) [RHEL-162129]
  - media: pulse8-cec: Handle partial deinit (Kate Hsuan) [RHEL-162129]
  - media: cx231xx: drop redundant device reference (Kate Hsuan) [RHEL-162129]
  - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (Kate Hsuan) [RHEL-162129] {CVE-2026-46312}
  - media: remove unnecessary module_init/exit functions (Kate Hsuan) [RHEL-162129]
  - media: ipu-bridge: Add OV5675 sensor config (Kate Hsuan) [RHEL-162129]
  - media: intel/ipu6: fix error pointer dereference (Kate Hsuan) [RHEL-162129] {CVE-2026-46313}
  - media: subdev: Add v4l2_subdev_get_frame_desc_passthrough helper (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Pass allocation size directly to uvc_alloc_urb_buffer (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: use usb_alloc_noncoherent/usb_free_noncoherent() (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix allocation for small frame sizes (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Return queued buffers on start_streaming() failure (Kate Hsuan) [RHEL-162129] {CVE-2026-43290}
  - media: uvcvideo: Create an ID namespace for streaming output terminals (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: Add hevc_ext_sps_[ls]t_rps controls (Kate Hsuan) [RHEL-162129]
  - media: v4l: ctrls: add a control for enabling strobe output (Kate Hsuan) [RHEL-162129]
  - media: v4l: ctrls: add a control for flash/strobe duration (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix digital gain range (Kate Hsuan) [RHEL-162129]
  - media: ov01a10: Fix indentation (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Update e-mail addresses (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Always call video_device_pipeline_alloc_start() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Drop custom functions to obtain sd state information (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Remove source_entity from struct ipu6_isys_stream (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Obtain unique source pad from remote sub-device (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Obtain remote pad using media_pad_remote_pad_unique() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Drop error argument from ipu6_isys_stream_start() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Always close firmware stream (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Close firmware streams on streaming enable failure (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Don't check pipeline in stream_start (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Remove redundant streaming start via buffer queueing (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Make symbols static (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Remove redundant driver data checks (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Drop MMU hardware initialisation in probe() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Ensure stream_mutex is acquired when dealing with node list (Kate Hsuan) [RHEL-162129]
  - media: ipu6: Fix RPM reference leak in probe error paths (Kate Hsuan) [RHEL-162129] {CVE-2026-43177}
  - media: ipu6: Fix typo and wrong constant in ipu6-mmu.c (Kate Hsuan) [RHEL-162129]
  - media: v4l2-subdev: Extend VIDIOC_SUBDEV_S_ROUTING error codes (Kate Hsuan) [RHEL-162129]
  - media: v4l2-async: Fix error handling on steps after finding a match (Kate Hsuan) [RHEL-162129] {CVE-2026-43189}
  - media: v4l2-fwnode: Allow passing NULL fwnode to endpoint parsers (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: Set error v4l2_ctrl_new_fwnode_properties consistently (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add ov01a1b support (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Optimize setting h/vflip values (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add ov01a10_sensor_cfg struct (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Remove values set by controls from global_setting[] (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Only set register 0x0305 once (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Replace exposure->min/step with direct define use (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Remove struct ov01a10_reg_list (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add cropping support / allow arbitrary sizes (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Use native and default for pixel-array size names (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Move setting of ctrl->flags to after checking ctrl_hdlr->error (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Don't update pixel_rate and link_freq from set_fmt (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add power on/off sequencing support (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add ov01a10_check_hwcfg() function (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Store dev pointer in struct ov01a10 (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Remove overly verbose probe() error reporting (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Convert to new CCI register access helpers (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Change default vblank value to a vblank resulting in 30 fps (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix test-pattern disabling (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix analogue gain range (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix reported pixel-rate value (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov01a10: Fix the horizontal flip control (Kate Hsuan) [RHEL-162129]
  - media: v4l2: Add description for V4L2_PIX_FMT_AV1 in v4l_fill_fmtdesc() (Kate Hsuan) [RHEL-162129]
  - media: uapi: videodev2: Add support for AV1 stateful decoder (Kate Hsuan) [RHEL-162129]
  - Revert "media: uvcvideo: Remove nodrop parameter" (Kate Hsuan) [RHEL-162129]
  - media: saa6588: Remove dprintk macro and use v4l2_info() (Kate Hsuan) [RHEL-162129]
  - media: mc: add debugfs node to keep track of requests (Kate Hsuan) [RHEL-162129]
  - media: mc: add manual request completion (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Document how to format GUIDs (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Remove nodrop parameter (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: UVC minimum relative pan/tilt/zoom speed fix. (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Fix support for V4L2_CTRL_FLAG_HAS_WHICH_MIN_MAX (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: Replace dev_dbg() with uvc_dbg() (Kate Hsuan) [RHEL-162129]
  - media: vb2: drop wait_prepare/finish callbacks (Kate Hsuan) [RHEL-162129]
  - media: vb2: remove vb2_ops_wait_prepare/finish helpers (Kate Hsuan) [RHEL-162129]
  - media: ipu6: isys: Add support for monochrome media bus formats (Kate Hsuan) [RHEL-162129]
  - media: v4l: Add helper to get number of active lanes via a pad (Kate Hsuan) [RHEL-162129]
  - media: ipu-bridge: Add OV05C10 to the list of supported sensors (Kate Hsuan) [RHEL-162129]
  - media: ipu-bridge: Add IMX471 to the list of supported sensors (Kate Hsuan) [RHEL-162129]
  - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path (Kate Hsuan) [RHEL-162129]
  - media: ov13b10: Add ACPI ID for ASUS Z13 Flow laptop (Kate Hsuan) [RHEL-162129]
  - media: ivsc: Release csi_dev reference early in mei_ace_setup_dev_link() (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: set AV1 sequence flags for testing (Kate Hsuan) [RHEL-162129]
  - media: videobuf2: forbid remove_bufs when legacy fileio is active (Kate Hsuan) [RHEL-162129] {CVE-2025-40302}
  - media: v4l2-subdev / pdx86: int3472: Use "privacy" as con_id for the privacy LED (Kate Hsuan) [RHEL-162129]
  - media: v4l2-ctrls: add full AV1 profile validation in validate_av1_sequence() (Kate Hsuan) [RHEL-162129]
  - media: ipu6: isys: Use %pe format specifier (Kate Hsuan) [RHEL-162129]
  - media: ipu-bridge: Use %pe format specifier (Kate Hsuan) [RHEL-162129]
  - media: i2c: ov5675: Use %pe format specifier (Kate Hsuan) [RHEL-162129]
  - media: cec: Fix debugfs leak on bus_register() failure (Kate Hsuan) [RHEL-162129]
  - media: uvcvideo: eUSB2 double isochronous bandwidth support (Kate Hsuan) [RHEL-162129]
  - udp: Fix wildcard bind conflict check when using hash2 (Paolo Abeni) [RHEL-152739]
  - tcp: optimize inet_use_bhash2_on_bind() (Paolo Abeni) [RHEL-152739]
  - mm/hugetlb: fix folio is still mapped when deleted (Rafael Aquini) [RHEL-145695] {CVE-2025-40006}
  - mm/filemap: fix page_cache_prev_miss() when no hole is found (Rafael Aquini) [RHEL-145695]
  - mm/kconfig: make BALLOON_COMPACTION depend on MIGRATION (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/maintainer-profile: fix a typo on mm-untable link (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: fix wrong comment of damon_call() return timing (Rafael Aquini) [RHEL-145695]
  - mm/shmem: remove unused entry_order after large swapin rework (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: clear walk_control on inactive context in damos_walk() (Rafael Aquini) [RHEL-145695] {CVE-2026-43388}
  - mm/damon/Kconfig: make DAMON_STAT_ENABLED_DEFAULT depend on DAMON_STAT (Rafael Aquini) [RHEL-145695]
  - mm/mremap: honour writable bit in mremap pte batching (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: fix incorrect error return from hugetlb_reserve_pages() (Rafael Aquini) [RHEL-145695]
  - mm/memory_hotplug: maintain N_NORMAL_MEMORY during hotplug (Rafael Aquini) [RHEL-145695]
  - mm: restore per-memcg proactive reclaim with !CONFIG_NUMA (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: remove call_control in inactive contexts (Rafael Aquini) [RHEL-145695] {CVE-2026-23012}
  - mm/damon/core: fix list_add_tail() call on damon_call() (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: fix memory leak of repeat mode damon_call_control objects (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: check contexts->nr in repeat_call_fn (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: change next_update_jiffies to a global variable (Rafael Aquini) [RHEL-145695]
  - selftests/proc: fix string literal warning in proc-maps-race.c (Rafael Aquini) [RHEL-145695]
  - mm/mseal: update VMA end correctly on merge (Rafael Aquini) [RHEL-145695]
  - init/main.c: fix boot time tracing crash (Rafael Aquini) [RHEL-145695]
  - selftests/mm: fix usage of FORCE_READ() in cow tests (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails (Rafael Aquini) [RHEL-145695] {CVE-2026-31653}
  - kmsan: fix out-of-bounds access to shadow memory (Rafael Aquini) [RHEL-145695] {CVE-2025-40008}
  - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: use dynamically allocated repeat mode damon_call_control (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: introduce damon_call_control->dealloc_on_cancel (Rafael Aquini) [RHEL-145695]
  - mm: folio_may_be_lru_cached() unless folio_test_large() (Rafael Aquini) [RHEL-145695]
  - mm: revert "mm: vmscan.c: fix OOM on swap stress test" (Rafael Aquini) [RHEL-145695]
  - mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" (Rafael Aquini) [RHEL-145695]
  - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: fix use-after-free in state_show() (Rafael Aquini) [RHEL-145695] {CVE-2025-39877}
  - mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() (Rafael Aquini) [RHEL-145695] {CVE-2025-39910}
  - mm/mremap: fix regression in vrm->new_addr check (Rafael Aquini) [RHEL-145695]
  - percpu: fix race on alloc failed warning limit (Rafael Aquini) [RHEL-145695]
  - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() (Rafael Aquini) [RHEL-145695] {CVE-2025-39916}
  - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() (Rafael Aquini) [RHEL-145695] {CVE-2025-39909}
  - mm/damon/core: set quota->charged_from to jiffies at first charge window (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-145695]
  - mm/memory_hotplug: fix hwpoisoned large folio handling in do_migrate_range() (Rafael Aquini) [RHEL-145695]
  - mm/khugepaged: fix the address passed to notifier on testing young (Rafael Aquini) [RHEL-145695]
  - mm: fix possible deadlock in kmemleak (Rafael Aquini) [RHEL-145695]
  - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-145695] {CVE-2025-39845}
  - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-145695]
  - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-145695] {CVE-2025-39844}
  - mm: fix accounting of memmap pages (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: prevent unnecessary overflow in damos_set_effective_quota() (Rafael Aquini) [RHEL-145695]
  - mm/kasan: avoid lazy MMU mode hazards (Rafael Aquini) [RHEL-145695]
  - mm/kasan: fix vmalloc shadow memory (de-)population races (Rafael Aquini) [RHEL-145695]
  - kunit: kasan_test: disable fortify string checker on kasan_strings() test (Rafael Aquini) [RHEL-145695]
  - selftests/mm: fix FORCE_READ to read input value correctly (Rafael Aquini) [RHEL-145695]
  - mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE (Rafael Aquini) [RHEL-145695] {CVE-2025-39899}
  - s390/mm: Prevent possible preempt_count overflow (Rafael Aquini) [RHEL-145695]
  - memblock: fix kernel-doc for MEMBLOCK_RSRV_NOINIT (Rafael Aquini) [RHEL-145695]
  - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Rafael Aquini) [RHEL-145695] {CVE-2025-39902}
  - mm: numa,memblock: Use SZ_1M macro to denote bytes to MB conversion (Rafael Aquini) [RHEL-145695]
  - mm/mremap: fix WARN with uffd that has remap events disabled (Rafael Aquini) [RHEL-145695] {CVE-2025-39775}
  - mm/damon/sysfs-schemes: put damos dests dir after removing its files (Rafael Aquini) [RHEL-145695]
  - mm/migrate: fix NULL movable_ops if CONFIG_ZSMALLOC=m (Rafael Aquini) [RHEL-145695]
  - selftests/mm: add test for invalid multi VMA operations (Rafael Aquini) [RHEL-145695]
  - mm/mremap: catch invalid multi VMA moves earlier (Rafael Aquini) [RHEL-145695]
  - mm/mremap: allow multi-VMA move when filesystem uses thp_get_unmapped_area (Rafael Aquini) [RHEL-145695]
  - mm/numa_memblks: Use pr_debug instead of printk(KERN_DEBUG) (Rafael Aquini) [RHEL-145695]
  - mm/mremap: avoid expensive folio lookup on mremap folio pte batch (Rafael Aquini) [RHEL-145695]
  - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (Rafael Aquini) [RHEL-145695] {CVE-2025-38686}
  - mm: pass page directly instead of using folio_page (Rafael Aquini) [RHEL-145695]
  - mm/vmscan: fix inverted polarity in lru_gen_seq_show() (Rafael Aquini) [RHEL-145695]
  - mm: fix the race between collapse and PT_RECLAIM under per-vma lock (Rafael Aquini) [RHEL-145695]
  - s390/mm: Allocate page table with PAGE_SIZE granularity (Rafael Aquini) [RHEL-145695]
  - mm: mempool: fix crash in mempool_free() for zero-minimum pools (Rafael Aquini) [RHEL-145695]
  - mm: correct type for vmalloc vm_flags fields (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: fix major fault counting (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: rework swap entry and index calculation for large swapin (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: simplify swapin path and result handling (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: never use swap cache and readahead for SWP_SYNCHRONOUS_IO (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: tidy up swap entry splitting (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: tidy up THP swapin checks (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: avoid redundant Xarray lookup during swapin (Rafael Aquini) [RHEL-145695]
  - x86/ftrace: enable EXECMEM_ROX_CACHE for ftrace allocations (Rafael Aquini) [RHEL-145695]
  - x86/kprobes: enable EXECMEM_ROX_CACHE for kprobes allocations (Rafael Aquini) [RHEL-145695]
  - execmem: drop writable parameter from execmem_fill_trapping_insns() (Rafael Aquini) [RHEL-145695]
  - execmem: add fallback for failures in vmalloc(VM_ALLOW_HUGE_VMAP) (Rafael Aquini) [RHEL-145695]
  - execmem: move execmem_force_rw() and execmem_restore_rox() before use (Rafael Aquini) [RHEL-145695]
  - execmem: rework execmem_cache_free() (Rafael Aquini) [RHEL-145695]
  - execmem: introduce execmem_alloc_rw() (Rafael Aquini) [RHEL-145695]
  - execmem: drop unused execmem_update_copy() (Rafael Aquini) [RHEL-145695]
  - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (Rafael Aquini) [RHEL-145695] {CVE-2025-38554}
  - mm/rmap: add anon_vma lifetime debug check (Rafael Aquini) [RHEL-145695]
  - mm: remove mm/io-mapping.c (Rafael Aquini) [RHEL-145695]
  - khugepaged: optimize collapse_pte_mapped_thp() by PTE batching (Rafael Aquini) [RHEL-145695]
  - khugepaged: optimize __collapse_huge_page_copy_succeeded() by PTE batching (Rafael Aquini) [RHEL-145695]
  - mm: add get_and_clear_ptes() and clear_ptes() (Rafael Aquini) [RHEL-145695]
  - mm/mincore: hold PTL in mincore_hugetlb (Rafael Aquini) [RHEL-145695]
  - mm/memory-failure: hold PTL in hwpoison_hugetlb_range (Rafael Aquini) [RHEL-145695]
  - mm/mseal: rework mseal apply logic (Rafael Aquini) [RHEL-145695]
  - mm/mseal: simplify and rename VMA gap check (Rafael Aquini) [RHEL-145695]
  - mm/mseal: small cleanups (Rafael Aquini) [RHEL-145695]
  - mm/mseal: update madvise() logic (Rafael Aquini) [RHEL-145695]
  - mm/mseal: always define VM_SEALED (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: skip isolating folios already in destination nid (Rafael Aquini) [RHEL-145695]
  - kasan: skip quarantine if object is still accessible under RCU (Rafael Aquini) [RHEL-145695]
  - mm/page-flags: remove folio_start_writeback_keepwrite() (Rafael Aquini) [RHEL-145695]
  - mm/shmem, swap: improve cached mTHP handling and fix potential hang (Rafael Aquini) [RHEL-145695]
  - mm/page_alloc: remove trace_mm_alloc_contig_migrate_range_info() (Rafael Aquini) [RHEL-145695]
  - mm: remove grab_cache_page() (Rafael Aquini) [RHEL-145695]
  - mm/damon/ops-common: ignore migration request to invalid nodes (Rafael Aquini) [RHEL-145695] {CVE-2025-39700}
  - tools/testing/selftests: explicitly test split multi VMA mremap move (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: test MREMAP_DONTUNMAP on multiple VMA move (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: add mremap() shrink test for multiple VMAs (Rafael Aquini) [RHEL-145695]
  - selftests/mm: guard-regions: Use SKIP() instead of ksft_exit_skip() (Rafael Aquini) [RHEL-145695]
  - selftests/mm: reuse FORCE_READ to replace "asm volatile("" : "+r" (XXX));" (Rafael Aquini) [RHEL-145695]
  - arm64: add batched versions of ptep_modify_prot_start/commit (Rafael Aquini) [RHEL-145695]
  - mm: optimize mprotect() by PTE batching (Rafael Aquini) [RHEL-145695]
  - mm: split can_change_pte_writable() into private and shared parts (Rafael Aquini) [RHEL-145695]
  - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure (Rafael Aquini) [RHEL-145695]
  - mm: add batched versions of ptep_modify_prot_start/commit (Rafael Aquini) [RHEL-145695]
  - mm: optimize mprotect() for MM_CP_PROT_NUMA by batch-skipping PTEs (Rafael Aquini) [RHEL-145695]
  - mm: refactor MM_CP_PROT_NUMA skipping case into new function (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: refactor after-split (page) cache code (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: get frozen folio refcount with folio_expected_ref_count() (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: convert VM_BUG* to VM_WARN* in __folio_split (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: deduplicate code in __folio_split() (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: remove after_split label in __split_unmapped_folio() (Rafael Aquini) [RHEL-145695]
  - mm/huge_memory: move unrelated code out of __split_unmapped_folio() (Rafael Aquini) [RHEL-145695]
  - mm: mempool: fix wake-up edge case bug for zero-minimum pools (Rafael Aquini) [RHEL-145695]
  - fs/proc/task_mmu: read proc/pid/maps under per-vma lock (Rafael Aquini) [RHEL-145695]
  - fs/proc/task_mmu: remove conversion of seq_file position to unsigned (Rafael Aquini) [RHEL-145695]
  - selftests/proc: add verbose mode for /proc/pid/maps tearing tests (Rafael Aquini) [RHEL-145695]
  - selftests/proc: extend /proc/pid/maps tearing test to include vma remapping (Rafael Aquini) [RHEL-145695]
  - selftests/proc: extend /proc/pid/maps tearing test to include vma resizing (Rafael Aquini) [RHEL-145695]
  - selftests/proc: add /proc/pid/maps tearing from vma split test (Rafael Aquini) [RHEL-145695]
  - mm: cma: simplify cma_maxchunk_get() (Rafael Aquini) [RHEL-145695]
  - mm: cma: simplify cma_debug_show_areas() (Rafael Aquini) [RHEL-145695]
  - fs: stable_page_flags(): use snapshot_page() (Rafael Aquini) [RHEL-145695]
  - proc: kpagecount: use snapshot_page() (Rafael Aquini) [RHEL-145695]
  - mm/util: introduce snapshot_page() (Rafael Aquini) [RHEL-145695]
  - mm/memory: introduce is_huge_zero_pfn() and use it in vm_normal_page_pmd() (Rafael Aquini) [RHEL-145695]
  - Docs/ABI/damon: update for refresh_ms (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: document refresh_ms file (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: implement refresh_ms file internal work (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: implement refresh_ms file under kdamond directory (Rafael Aquini) [RHEL-145695]
  - memcg: convert memcg->socket_pressure to u64 (Rafael Aquini) [RHEL-145695]
  - mm: remove arch_flush_tlb_batched_pending() arch helper (Rafael Aquini) [RHEL-145695]
  - mm: drop hugetlb_free_pgd_range() (Rafael Aquini) [RHEL-145695]
  - mm: remove call to hugetlb_free_pgd_range() (Rafael Aquini) [RHEL-145695]
  - sparc64: remove hugetlb_free_pgd_range() (Rafael Aquini) [RHEL-145695]
  - mm/shmem: writeout free swap if swap_writeout() reactivates (Rafael Aquini) [RHEL-145695]
  - mm/shmem: hold shmem_swaplist spinlock (not mutex) much less (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: extend mremap_test to test multi-VMA mremap (Rafael Aquini) [RHEL-145695]
  - mm/mremap: permit mremap() move of multiple VMAs (Rafael Aquini) [RHEL-145695]
  - mm/mremap: clean up mlock populate behaviour (Rafael Aquini) [RHEL-145695]
  - mm/mremap: move remap_is_valid() into check_prep_vma() (Rafael Aquini) [RHEL-145695]
  - mm/mremap: check remap conditions earlier (Rafael Aquini) [RHEL-145695]
  - mm/mremap: use an explicit uffd failure path for mremap (Rafael Aquini) [RHEL-145695]
  - mm/mremap: cleanup post-processing stage of mremap (Rafael Aquini) [RHEL-145695]
  - mm/mremap: put VMA check and prep logic into helper function (Rafael Aquini) [RHEL-145695]
  - mm/mremap: refactor initial parameter sanity checks (Rafael Aquini) [RHEL-145695]
  - mm/mremap: perform some simple cleanups (Rafael Aquini) [RHEL-145695]
  - mm/vma: refactor vma_modify_flags_name() to vma_modify_name() (Rafael Aquini) [RHEL-145695]
  - mm: optimize lru_note_cost() by adding lru_note_cost_unlock_irq() (Rafael Aquini) [RHEL-145695]
  - mm/mglru: stop try_to_inc_min_seq() if min_seq[type] has not increased (Rafael Aquini) [RHEL-145695]
  - s390/mm: Remove possible false-positive warning in pte_free_defer() (Rafael Aquini) [RHEL-145695]
  - memcg_slabinfo: Fix use of PG_slab (Rafael Aquini) [RHEL-145695]
  - kfence: Remove mention of PG_slab (Rafael Aquini) [RHEL-145695]
  - mm: move randomize_va_space into memory.c (Rafael Aquini) [RHEL-145695]
  - x86: implement crashkernel cma reservation (Rafael Aquini) [RHEL-145695]
  - kdump: wait for DMA to finish when using CMA (Rafael Aquini) [RHEL-145695]
  - kdump, documentation: describe craskernel CMA reservation (Rafael Aquini) [RHEL-145695]
  - kdump: implement reserve_crashkernel_cma (Rafael Aquini) [RHEL-145695]
  - Add a new optional ",cma" suffix to the crashkernel= command line option (Rafael Aquini) [RHEL-145695]
  - mm/page_owner: convert set_page_owner_migrate_reason() to folios (Rafael Aquini) [RHEL-145695]
  - mm/memfd: replace deprecated strcpy() with memcpy() in alloc_name() (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: remove damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: remove damon_sysfs_before_terminate() (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: destroy targets when kdamond_fn() finish (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: remove damon_sysfs_destroy_targets() (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: put pid in cleanup_target() (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: add cleanup_target() ops callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: do not call ops.cleanup() when destroying targets (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/lru_sort: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/reclaim: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/stat: use damon_call() repeat mode instead of damon_callback (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: introduce repeat mode damon_call() (Rafael Aquini) [RHEL-145695]
  - mm/damon: accept parallel damon_call() requests (Rafael Aquini) [RHEL-145695]
  - mm: simplify min_brk handling in brk() (Rafael Aquini) [RHEL-145695]
  - readahead: use folio_nr_pages() instead of shift operation (Rafael Aquini) [RHEL-145695]
  - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (Rafael Aquini) [RHEL-145695]
  - mm: introduce per-node proactive reclaim interface (Rafael Aquini) [RHEL-145695]
  - mm/vmscan: make __node_reclaim() more generic (Rafael Aquini) [RHEL-145695]
  - mm/memcg: make memory.reclaim interface generic (Rafael Aquini) [RHEL-145695]
  - mm/vmscan: respect psi_memstall region in node reclaim (Rafael Aquini) [RHEL-145695]
  - mm: remove unmap_and_put_page() (Rafael Aquini) [RHEL-145695]
  - mm/memory.c: use folios in __access_remote_vm() (Rafael Aquini) [RHEL-145695]
  - mm/memory.c: use folios in __copy_remote_vm_str() (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: apply filters in migrate_{hot/cold} (Rafael Aquini) [RHEL-145695]
  - mm/damon: move folio filtering from paddr to ops-common (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: use damos->migrate_dests in migrate_{hot,cold} (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: document vaddr support for migrate_{hot,cold} (Rafael Aquini) [RHEL-145695]
  - mm/damon/vaddr: add vaddr versions of migrate_{hot,cold} (Rafael Aquini) [RHEL-145695]
  - mm/damon: move migration helpers from paddr to ops-common (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: commit damos->migrate_dests (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: document dests directory (Rafael Aquini) [RHEL-145695]
  - Docs/ABI/damon: document schemes dests directory (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: set damos->migrate_dests (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: implement DAMOS action destinations directory (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: add damos->migrate_dests field (Rafael Aquini) [RHEL-145695]
  - mm/damon: add struct damos_migrate_dests (Rafael Aquini) [RHEL-145695]
  - mm/damon/core: commit damos->target_nid (Rafael Aquini) [RHEL-145695]
  - mm, vmstat: remove the NR_WRITEBACK_TEMP node_stat_item counter (Rafael Aquini) [RHEL-145695]
  - mm/vmstat: utilize designated initializers for the vmstat_text array (Rafael Aquini) [RHEL-145695]
  - mm: strictly check vmstat_text array size (Rafael Aquini) [RHEL-145695]
  - mm/vmstat: make MEMCG select VM_EVENT_COUNTERS (Rafael Aquini) [RHEL-145695]
  - mm: remove boolean output parameters from folio_pte_batch_ext() (Rafael Aquini) [RHEL-145695]
  - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags() (Rafael Aquini) [RHEL-145695]
  - mm: smaller folio_pte_batch() improvements (Rafael Aquini) [RHEL-145695]
  - mm: convert FPB_IGNORE_* into FPB_RESPECT_* (Rafael Aquini) [RHEL-145695]
  - mm/migrate: remove the -EEXIST conversion for move_pages() (Rafael Aquini) [RHEL-145695]
  - selftests/mm: pagemap_scan ioctl: add PFN ZERO test cases (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/maintainer-profile: update for mm-new tree (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: don't hold kdamond_lock in before_terminate() (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: use DAMON core API damon_is_running() (Rafael Aquini) [RHEL-145695]
  - samples/damon/mtier: rename to have damon_sample_ prefix (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: rename to have damon_sample_ prefix (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: rename to have damon_sample_ prefix (Rafael Aquini) [RHEL-145695]
  - ext4: support uncached buffered I/O (Rafael Aquini) [RHEL-145695]
  - mm/pagemap: add write_begin_get_folio() helper function (Rafael Aquini) [RHEL-145695]
  - fs: change write_begin/write_end interface to take struct kiocb * (Rafael Aquini) [RHEL-145695]
  - mm/damon/reclaim: use parameter context correctly (Rafael Aquini) [RHEL-145695]
  - mm/damon/lru_sort: reset enabled when DAMON start failed (Rafael Aquini) [RHEL-145695]
  - mm/damon/reclaim: reset enabled when DAMON start failed (Rafael Aquini) [RHEL-145695]
  - samples/damon/mtier: support boot time enable setup (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: fix boot time enable crash (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: fix boot time enable handling (Rafael Aquini) [RHEL-145695]
  - mm/damon: add trace event for effective size quota (Rafael Aquini) [RHEL-145695]
  - mm/damon: add trace event for auto-tuned monitoring intervals (Rafael Aquini) [RHEL-145695]
  - khugepaged: reduce race probability between migration and khugepaged (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: provide single balloon_page_insert() and balloon_mapping_gfp_mask() (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: "movable_ops" doc updates (Rafael Aquini) [RHEL-145695]
  - docs/mm: convert from "Non-LRU page migration" to "movable_ops page migration" (Rafael Aquini) [RHEL-145695]
  - mm: rename PAGE_MAPPING_* to FOLIO_MAPPING_* (Rafael Aquini) [RHEL-145695]
  - mm: simplify folio_expected_ref_count() (Rafael Aquini) [RHEL-145695]
  - mm/page-flags: remove folio_mapping_flags() (Rafael Aquini) [RHEL-145695]
  - mm/page-alloc: remove PageMappingFlags() (Rafael Aquini) [RHEL-145695]
  - mm/page-flags: rename PAGE_MAPPING_MOVABLE to PAGE_MAPPING_ANON_KSM (Rafael Aquini) [RHEL-145695]
  - mm: rename PG_isolated to PG_movable_ops_isolated (Rafael Aquini) [RHEL-145695]
  - mm: convert "movable" flag in page->mapping to a page flag (Rafael Aquini) [RHEL-145695]
  - mm: stop storing migration_ops in page->mapping (Rafael Aquini) [RHEL-145695]
  - mm: remove __folio_test_movable() (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: drop __folio_test_movable() check for large folios (Rafael Aquini) [RHEL-145695]
  - mm: rename __PageMovable() to page_has_movable_ops() (Rafael Aquini) [RHEL-145695]
  - mm/migration: remove PageMovable() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: remove __ClearPageMovable() (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: stop using __ClearPageMovable() (Rafael Aquini) [RHEL-145695]
  - mm/zsmalloc: stop using __ClearPageMovable() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: move movable_ops page handling out of move_to_new_folio() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: remove folio_test_movable() and folio_movable_ops() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: factor out movable_ops page handling into migrate_movable_ops_page() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: rename putback_movable_folio() to putback_movable_ops_page() (Rafael Aquini) [RHEL-145695]
  - mm/migrate: rename isolate_movable_page() to isolate_movable_ops_page() (Rafael Aquini) [RHEL-145695]
  - mm/zsmalloc: make PageZsmalloc() sticky until the page is freed (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: make PageOffline sticky until the page is freed (Rafael Aquini) [RHEL-145695]
  - mm/page_alloc: let page freeing clear any set page type (Rafael Aquini) [RHEL-145695]
  - mm/zsmalloc: drop PageIsolated() related VM_BUG_ONs (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() (Rafael Aquini) [RHEL-145695]
  - mm/balloon_compaction: we cannot have isolated pages in the balloon list (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: add mremap() unfaulted/faulted test cases (Rafael Aquini) [RHEL-145695]
  - cma: move memory allocation to a helper function (Rafael Aquini) [RHEL-145695]
  - cma: split reservation of fixed area into a helper function (Rafael Aquini) [RHEL-145695]
  - cma: move __cma_declare_contiguous_nid() before its usage (Rafael Aquini) [RHEL-145695]
  - mm: remove outdated filename comment in percpu-stats.c (Rafael Aquini) [RHEL-145695]
  - mm: fix spelling issue in swap.h (Rafael Aquini) [RHEL-145695]
  - mm/cma: use str_plural() in cma_declare_contiguous_multi() (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: drop unlikelys from hugetlb_fault (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: drop obsolete comment about non-present pte and second faults (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: rename anon_rmap to new_anon_folio and make it boolean (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: sort out folio locking in the faulting path (Rafael Aquini) [RHEL-145695]
  - mm,hugetlb: change mechanism to detect a COW on private mapping (Rafael Aquini) [RHEL-145695]
  - mm/debug_vm_pgtable: use a swp_entry_t input value for swap tests (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: use str_plural() in report_hugepages() (Rafael Aquini) [RHEL-145695]
  - mm/percpu: prevent concurrency problem for pcpu_nr_populated read with spin lock (Rafael Aquini) [RHEL-145695]
  - mm: deduplicate mm_get_unmapped_area() (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: remove prepare_hugepage_range() (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: remove migratetype parameter from more functions (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: remove migratetype from undo_isolate_page_range() (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: remove migratetype from move_freepages_block_isolate() (Rafael Aquini) [RHEL-145695]
  - mm/page_alloc: add support for initializing pageblock as isolated (Rafael Aquini) [RHEL-145695]
  - mm/page_isolation: make page isolation a standalone bit (Rafael Aquini) [RHEL-145695]
  - mm/page_alloc: pageblock flags functions clean up (Rafael Aquini) [RHEL-145695]
  - mm,memory_hotplug: drop status_change_nid parameter from memory_notify (Rafael Aquini) [RHEL-145695]
  - mm,page_ext: derive the node from the pfn (Rafael Aquini) [RHEL-145695]
  - mm,mempolicy: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - kernel,cpuset: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - drivers,hmat: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - drivers,cxl: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - mm,memory-tiers: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - mm,slub: use node-notifier instead of memory-notifier (Rafael Aquini) [RHEL-145695]
  - mm,memory_hotplug: implement numa node notifier (Rafael Aquini) [RHEL-145695]
  - mm,memory_hotplug: remove status_change_nid_normal and update documentation (Rafael Aquini) [RHEL-145695]
  - mm,slub: do not special case N_NORMAL nodes for slab_nodes (Rafael Aquini) [RHEL-145695]
  - mm, madvise: use standard madvise locking in madvise_set_anon_name() (Rafael Aquini) [RHEL-145695]
  - mm, madvise: move madvise_set_anon_name() down the file (Rafael Aquini) [RHEL-145695]
  - mm, madvise: extract mm code from prctl_set_vma() to mm/madvise.c (Rafael Aquini) [RHEL-145695]
  - mm, madvise: simplify anon_name handling (Rafael Aquini) [RHEL-145695]
  - mm/madvise: eliminate very confusing manipulation of prev VMA (Rafael Aquini) [RHEL-145695]
  - mm/madvise: thread all madvise state through madv_behavior (Rafael Aquini) [RHEL-145695]
  - mm/madvise: thread VMA range state through madvise_behavior (Rafael Aquini) [RHEL-145695]
  - mm/madvise: thread mm_struct through madvise_behavior (Rafael Aquini) [RHEL-145695]
  - mm/madvise: remove the visitor pattern and thread anon_vma state (Rafael Aquini) [RHEL-145695]
  - selftests/mm: remove duplicate .gitignore entries (Rafael Aquini) [RHEL-145695]
  - mm: unexport globally copy_to_kernel_nofault (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs: decouple from damon_ops_id (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: decouple from damos_filter_type (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: decouple from damos_wmark_metric (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: decouple from damos_action (Rafael Aquini) [RHEL-145695]
  - mm/damon/sysfs-schemes: decouple from damos_quota_goal_metric (Rafael Aquini) [RHEL-145695]
  - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (Rafael Aquini) [RHEL-145695] {CVE-2025-38681}
  - selftests/mm: reduce uffd-unit-test poison test to minimum (Rafael Aquini) [RHEL-145695]
  - mm/percpu: conditionally define _shared_alloc_tag via CONFIG_ARCH_MODULE_NEEDS_WEAK_PER_CPU (Rafael Aquini) [RHEL-145695]
  - mm/memfd: reserve hugetlb folios before allocation (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: make hugetlb_reserve_pages() return nr of entries updated (Rafael Aquini) [RHEL-145695]
  - mm: update architecture and driver code to use vm_flags_t (Rafael Aquini) [RHEL-145695]
  - mm: update core kernel code to use vm_flags_t consistently (Rafael Aquini) [RHEL-145695]
  - mm: change vm_get_page_prot() to accept vm_flags_t argument (Rafael Aquini) [RHEL-145695]
  - Revert "mm: make alloc_demote_folio externally invokable for migration" (Rafael Aquini) [RHEL-145695]
  - Revert "mm: rename alloc_demote_folio to alloc_migrate_folio" (Rafael Aquini) [RHEL-145695]
  - mm/damon/paddr: use alloc_migartion_target() with no migration fallback nodemask (Rafael Aquini) [RHEL-145695]
  - mm: huge_memory: fix the check for allowed huge orders in shmem (Rafael Aquini) [RHEL-145695]
  - selftest/mm: skip if fallocate() is unsupported in gup_longterm (Rafael Aquini) [RHEL-145695]
  - highmem: remove a use of folio->page (Rafael Aquini) [RHEL-145695]
  - secretmem: remove uses of struct page (Rafael Aquini) [RHEL-145695]
  - selftests: mm: add shmem collapse as a default test item (Rafael Aquini) [RHEL-145695]
  - selftests: khugepaged: fix the shmem collapse failure (Rafael Aquini) [RHEL-145695]
  - mm: use folio_expected_ref_count() helper for reference counting (Rafael Aquini) [RHEL-145695]
  - mm: madvise: use per_vma lock for MADV_FREE (Rafael Aquini) [RHEL-145695]
  - mm: optimize mremap() by PTE batching (Rafael Aquini) [RHEL-145695]
  - mm: call pointers to ptes as ptep (Rafael Aquini) [RHEL-145695]
  - gup: optimize longterm pin_user_pages() for large folio (Rafael Aquini) [RHEL-145695]
  - mm/pagewalk: split walk_page_range_novma() into kernel/user parts (Rafael Aquini) [RHEL-145695]
  - mm/memfd: clarify error handling labels in memfd_create() (Rafael Aquini) [RHEL-145695]
  - selftests/mm: check for YAMA ptrace_scope configuraiton before modifying it (Rafael Aquini) [RHEL-145695]
  - selftests/mm: add messages about test errors to the cow tests (Rafael Aquini) [RHEL-145695]
  - selftests/mm: don't compare return values to in cow (Rafael Aquini) [RHEL-145695]
  - selftests/mm: convert some cow error reports to ksft_perror() (Rafael Aquini) [RHEL-145695]
  - kselftest/mm: clarify errors for pipe() (Rafael Aquini) [RHEL-145695]
  - mm/filemap: allow arch to request folio size for exec memory (Rafael Aquini) [RHEL-145695]
  - mm/readahead: store folio order in struct file_ra_state (Rafael Aquini) [RHEL-145695]
  - mm/readahead: make space in struct file_ra_state (Rafael Aquini) [RHEL-145695]
  - mm/readahead: terminate async readahead on natural boundary (Rafael Aquini) [RHEL-145695]
  - mm/readahead: honour new_order in page_cache_ra_order() (Rafael Aquini) [RHEL-145695]
  - mm/mempolicy: skip unnecessary synchronize_rcu() (Rafael Aquini) [RHEL-145695]
  - mm: use per_vma lock for MADV_DONTNEED (Rafael Aquini) [RHEL-145695]
  - userfaultfd: remove UFFD_CLOEXEC, UFFD_NONBLOCK, and UFFD_FLAGS_SET (Rafael Aquini) [RHEL-145695]
  - userfaultfd: remove (VM_)BUG_ON()s (Rafael Aquini) [RHEL-145695]
  - userfaultfd: prevent unregistering VMAs through a different userfaultfd (Rafael Aquini) [RHEL-145695]
  - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-145695]
  - drivers/base/node: rename __register_one_node() to register_one_node() (Rafael Aquini) [RHEL-145695]
  - drivers/base/node: rename register_memory_blocks_under_node() and remove context argument (Rafael Aquini) [RHEL-145695]
  - drivers/base/node: remove register_memory_blocks_under_node() function call from register_one_node (Rafael Aquini) [RHEL-145695]
  - drivers/base/node: remove register_mem_block_under_node_early() (Rafael Aquini) [RHEL-145695]
  - readahead: fix return value of page_cache_next_miss() when no hole is found (Rafael Aquini) [RHEL-145695]
  - mm/cma: pair the trace_cma_alloc_start/finish (Rafael Aquini) [RHEL-145695]
  - mm: madvise: use walk_page_range_vma() instead of walk_page_range() (Rafael Aquini) [RHEL-145695]
  - mm: stop passing a writeback_control structure to swap_writeout (Rafael Aquini) [RHEL-145695]
  - mm: stop passing a writeback_control structure to __swap_writepage (Rafael Aquini) [RHEL-145695]
  - mm: tidy up swap_writeout (Rafael Aquini) [RHEL-145695]
  - mm: stop passing a writeback_control structure to shmem_writeout (Rafael Aquini) [RHEL-145695]
  - mm: split out a writeout helper from pageout (Rafael Aquini) [RHEL-145695]
  - mm, list_lru: refactor the locking code (Rafael Aquini) [RHEL-145695]
  - mm: rename CONFIG_PAGE_BLOCK_ORDER to CONFIG_PAGE_BLOCK_MAX_ORDER (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon: add DAMON_STAT usage document (Rafael Aquini) [RHEL-145695]
  - mm/damon/stat: calculate and expose idle time percentiles (Rafael Aquini) [RHEL-145695]
  - mm/damon/stat: calculate and expose estimated memory bandwidth (Rafael Aquini) [RHEL-145695]
  - mm/damon: introduce DAMON_STAT module (Rafael Aquini) [RHEL-145695]
  - mm/hugetlb: convert hugetlb_change_protection() to folios (Rafael Aquini) [RHEL-145695]
  - tools/testing/selftests: add VMA merge tests for KSM merge (Rafael Aquini) [RHEL-145695]
  - mm: prevent KSM from breaking VMA merging for new VMAs (Rafael Aquini) [RHEL-145695]
  - mm: ksm: refer to special VMAs via VM_SPECIAL in ksm_compatible() (Rafael Aquini) [RHEL-145695]
  - mm: ksm: have KSM VMA checks not require a VMA pointer (Rafael Aquini) [RHEL-145695]
  - mm: vmscan: apply proportional reclaim pressure for memcg when MGLRU is enabled (Rafael Aquini) [RHEL-145695]
  - samples/damon: fix damon sample mtier for start failure (Rafael Aquini) [RHEL-145695]
  - samples/damon: fix damon sample wsse for start failure (Rafael Aquini) [RHEL-145695]
  - samples/damon: fix damon sample prcl for start failure (Rafael Aquini) [RHEL-145695]
  - vmscan: don't bother with debugfs_real_fops() (Rafael Aquini) [RHEL-145695]
  - docs: dma-api: remove remnants of PCI DMA API (Rafael Aquini) [RHEL-145695]
  - docs: dma-api: replace consistent with coherent (Rafael Aquini) [RHEL-145695]
  - docs: dma-api: use "DMA API" consistently throughout the document (Rafael Aquini) [RHEL-145695]
  - fs: Remove three arguments from block_write_end() (Rafael Aquini) [RHEL-145695]
  - book3s64/radix : Optimize vmemmap start alignment (Rafael Aquini) [RHEL-145695]
  - book3s64/radix : Handle error conditions properly in radix_vmemmap_populate (Rafael Aquini) [RHEL-145695]
  - slub: Fix a documentation build error for krealloc() (Rafael Aquini) [RHEL-145695]
  - slab: Add SL_pfmemalloc flag (Rafael Aquini) [RHEL-145695]
  - slab: Add SL_partial flag (Rafael Aquini) [RHEL-145695]
  - slab: Rename slab->__page_flags to slab->flags (Rafael Aquini) [RHEL-145695]
  - doc: Move SLUB documentation to the admin guide (Rafael Aquini) [RHEL-145695]
  - memcg: cgroup: call css_rstat_updated irrespective of in_nmi() (Rafael Aquini) [RHEL-145695]
  - fs: convert simple use of generic_file_*_mmap() to .mmap_prepare() (Rafael Aquini) [RHEL-145695]
  - mm/filemap: introduce generic_file_*_mmap_prepare() helpers (Rafael Aquini) [RHEL-145695]
  - fs/xfs: transition from deprecated .mmap hook to .mmap_prepare (Rafael Aquini) [RHEL-145695]
  - fs/ext4: transition from deprecated .mmap hook to .mmap_prepare (Rafael Aquini) [RHEL-145695]
  - fs/dax: make it possible to check dev dax support without a VMA (Rafael Aquini) [RHEL-145695]
  - fs: consistently use can_mmap_file() helper (Rafael Aquini) [RHEL-145695]
  - mm/nommu: use file_has_valid_mmap_hooks() helper (Rafael Aquini) [RHEL-145695]
  - sysfs: constify internal references to 'struct bin_attribute' (Rafael Aquini) [RHEL-145695]
  - const_structs.checkpatch: add bin_attribute (Rafael Aquini) [RHEL-145695]
  - slab: Decouple slab_debug and no_hash_pointers (Rafael Aquini) [RHEL-145695]
  - arm64/mm: Close theoretical race where stale TLB entry remains valid (Rafael Aquini) [RHEL-145695]
  - mm: shmem: only remove inode from swaplist when it's swapped page count is 0 (Rafael Aquini) [RHEL-145695]
  - samples/damon: implement a DAMON module for memory tiering (Rafael Aquini) [RHEL-145695]
  - Docs/ABI/damon: document nid file (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: document 'nid' file (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: fix a comment typo (Rafael Aquini) [RHEL-145695]
  - docs/mm: Physical Memory: Populate the "Zones" section (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: update for {core,ops}_filters directories (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: add intervals_goal directory on the hierarchy (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: document for intervals auto-tuning (Rafael Aquini) [RHEL-145695]
  - samples/damon: a typo in the kconfig - sameple (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: categorize DAMOS filter types based on handling layer (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: clarify handling layer based filters evaluation sequence (Rafael Aquini) [RHEL-145695]
  - Docs/damon: move DAMOS filter type names and meaning to design doc (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: document hugepage_size filter (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: fix typo on DAMOS filters usage doc link (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: document hugepage_size filter type (Rafael Aquini) [RHEL-145695]
  - mm/damon: explain "effective quota" on kernel-doc comment (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/start: update snapshot example (Rafael Aquini) [RHEL-145695]
  - Docs/admin-guide/mm/damon/usage: fix and add missing DAMOS filter sysfs files on files hierarchy (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon: add an example monitoring intervals tuning (Rafael Aquini) [RHEL-145695]
  - Docs/mm/damon/design: add monitoring parameters tuning guide (Rafael Aquini) [RHEL-145695]
  - samples/damon/prcl: implement schemes setup (Rafael Aquini) [RHEL-145695]
  - samples/damon: introduce a skeleton of a smaple DAMON module for proactive reclamation (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: implement working set size estimation and logging (Rafael Aquini) [RHEL-145695]
  - samples/damon/wsse: start and stop DAMON as the user requests (Rafael Aquini) [RHEL-145695]
  - samples: add a skeleton of a sample DAMON module for working set size estimation (Rafael Aquini) [RHEL-145695]
  - cxgb4: flower: add support for fragmentation (CKI Backport Bot) [RHEL-128835]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-259.el10]
changelog:
  - redhat/kernel.spec.template: Switch UKI addons back to 504 cert (Vitaly Kuznetsov) [RHEL-238666]
  - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235810]
  - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232559] {CVE-2026-52991}
  - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232559] {CVE-2026-52991}
  - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224534]
  - randomize_kstack: Unify random source across arches (Mark Salter) [RHEL-215975]
  - x86/syscall/64: Move 64-bit syscall dispatch code (Mark Salter) [RHEL-215975]
  - randomize_kstack: Maintain kstack_offset per task (Mark Salter) [RHEL-215975]
  - dpll: zl3073x: add NCO virtual input pin (CKI Backport Bot) [RHEL-176048]
  - dpll: zl3073x: add per-DPLL serialization lock (CKI Backport Bot) [RHEL-176048]
  - dpll: zl3073x: use per-operation poll timeouts (CKI Backport Bot) [RHEL-176048]
  - dpll: add DPLL_PIN_TYPE_INT_NCO pin type (CKI Backport Bot) [RHEL-176048]
  - dpll: add STATE_CONNECTED_OVERRIDE pin capability (CKI Backport Bot) [RHEL-176048]
  - netfilter: nft_payload: fix mask build for partial field offload (Florian Westphal) [RHEL-185609]
  - ipvs: clear the nfct flag under lock (Florian Westphal) [RHEL-185609]
  - ipvs: do not mangle ICMP replies for non-first fragments (Florian Westphal) [RHEL-185609]
  - ipvs: fix places with wrong packet offsets (Florian Westphal) [RHEL-185609]
  - ipvs: fix the checksum validations (Florian Westphal) [RHEL-185609]
  - netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables: make nft_object rhltable per table (Florian Westphal) [RHEL-185609]
  - ipvs: do not propagate one-packet flag to synced conns (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: do not update comments from kernel-side hash adds (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair() (Florian Westphal) [RHEL-185609]
  - selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (Florian Westphal) [RHEL-185609]
  - netfilter: xt_physdev: masks are not c-strings (Florian Westphal) [RHEL-185609]
  - ipvs: fix more places with wrong ipv6 transport offsets (Florian Westphal) [RHEL-185609]
  - ipvs: reload ip header after head reallocation (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: use correct direction to set up tunnel route (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: fix zone comparison in tuple dedup (Florian Westphal) [RHEL-185609]
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (Florian Westphal) [RHEL-185609] {CVE-2026-64554}
  - netfilter: ecache: fix inverted time_after() check (Florian Westphal) [RHEL-185609]
  - netfilter: xt_nat: reject unsupported target families (Florian Westphal) [RHEL-185609]
  - ipvs: ensure inner headers in ICMP errors are in headroom (Florian Westphal) [RHEL-185609]
  - ipvs: use parsed transport offset in SCTP state lookup (Florian Westphal) [RHEL-185609]
  - ipvs: use parsed transport offset in TCP state lookup (Florian Westphal) [RHEL-185609]
  - ipvs: pass parsed transport offset to state handlers (Florian Westphal) [RHEL-185609]
  - netfilter: handle unreadable frags (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: support IPIP tunnel with direct xmit (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: IPIP tunnel hardware offload is not yet support (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: use dst in this direction when pushing IPIP header (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: allocate the proper memory for the generic hash structure (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: cleanup the add/del backlog when resize failed (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: exclude gc when resize is in progress (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: mark the rcu locked areas properly (Florian Westphal) [RHEL-185609]
  - netfilter: nft_lookup: fix catchall element handling with inverted lookups (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: module names must be null-terminated (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: zero chainstack array (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: terminate table name before find_table_lock() (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (Florian Westphal) [RHEL-185609]
  - netfilter: xt_connmark: reject invalid shift parameters (Florian Westphal) [RHEL-185609]
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (Florian Westphal) [RHEL-185609]
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_rbtree: get command skips end element with open interval (Florian Westphal) [RHEL-185609]
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates (Florian Westphal) [RHEL-185609]
  - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (Florian Westphal) [RHEL-185609]
  - netfilter: xt_u32: reject invalid shift counts (Florian Westphal) [RHEL-185609]
  - netfilter: nf_nat_sip: reload possible stale data pointer (Florian Westphal) [RHEL-185609]
  - netfilter: nftables: restrict checkum update offset (Florian Westphal) [RHEL-185609]
  - netfilter: nftables: restrict linklayer and network header writes (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_queue: restrict writes to network header (Florian Westphal) [RHEL-185609]
  - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: fix race between dump and ip_set_list resize (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: zero at allocation time (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration (Florian Westphal) [RHEL-185609]
  - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: run expectation eviction with no helper (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: add deprecation warnings for irc and pptp trackers (Florian Westphal) [RHEL-185609]
  - netfilter: ctnetlink: do not allow to reset helper on existing conntrack (Florian Westphal) [RHEL-185609]
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-185609]
  - selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test (Florian Westphal) [RHEL-185609]
  - netfilter: nft_synproxy: stop bypassing the priv->info snapshot (Florian Westphal) [RHEL-185609]
  - netfilter: x_tables.h: fix all kernel-doc warnings (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: prevent connlimit drops for early confirmed ct (Florian Westphal) [RHEL-185609]
  - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: use conntrack GC to reap expectations (Florian Westphal) [RHEL-185609]
  - netfilter: nf_reject: skip iphdr options when looking for icmp header (Florian Westphal) [RHEL-185609]
  - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-185609]
  - netfilter: nft_payload: reject offsets exceeding 65535 bytes (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: make sure gc is properly stopped (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: fix and simplify IP6IP6 tunnel handling (Florian Westphal) [RHEL-185609]
  - netfilter: xt_cluster: reject template conntracks in hash match (Florian Westphal) [RHEL-185609]
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: fix offloaded ct timeout never being extended (Florian Westphal) [RHEL-185609]
  - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: bail out if forward path cannot be discovered (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: check NULL when retrieving ct extension (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: gc and rcu fixes (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: add sequence counter to detect tree modifications (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: split count_tree_node rbtree walk into helper (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: use per nf_conncount_data spinlocks (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: callers must hold rcu read lock (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register (Florian Westphal) [RHEL-185609] {CVE-2026-53211}
  - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185609] {CVE-2026-53134}
  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185609] {CVE-2026-53218}
  - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185609] {CVE-2026-52942}
  - netfilter: x_tables: avoid leaking percpu counter pointers (Florian Westphal) [RHEL-185609] {CVE-2026-53219}
  - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-185609]
  - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185609] {CVE-2026-53220}
  - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: revert ct extension genid infrastructure (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: add refcounting from datapath (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper (Florian Westphal) [RHEL-185609]
  - netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: fix unaligned memory access in timestamp adjustment (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: adjust duplicate timestamp options (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: drop packets if timestamp adjustment fails (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures (Florian Westphal) [RHEL-185609]
  - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-185609]
  - netfilter: bridge: make ebt_snat ARP rewrite writable (Florian Westphal) [RHEL-185609] {CVE-2026-53266}
  - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185609] {CVE-2026-53267}
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185609] {CVE-2026-53212}
  - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185609] {CVE-2026-53268}
  - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185609] {CVE-2026-53269}
  - ipvs: clear the svc scheduler ptr early on edit (Florian Westphal) [RHEL-185609] {CVE-2026-53270}
  - netfilter: xt_NFQUEUE: prefer raw_smp_processor_id (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_ftp: avoid u16 overflows (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_pipapo_avx2: restore performance optimization (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_proto_tcp: fix typos in comments (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (Florian Westphal) [RHEL-185609]
  - netfilter: nfnl_cthelper: apply per-class values when updating policies (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_rbtree: remove dead conditional (Florian Westphal) [RHEL-185609]
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: use per-rule hash initval (Florian Westphal) [RHEL-185609]
  - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185609]
  - arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() (Mark Salter) [RHEL-184786]
  - arm64/mm: Reject memory removal that splits a kernel leaf mapping (Mark Salter) [RHEL-184786]
  - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() (Mark Salter) [RHEL-184786]
  - devlink: Fix parent ref leak in devl_rate_node_create() (Petr Oros) [RHEL-179081]
  - devlink: Fix parent ref leak on tc-bw failure (Petr Oros) [RHEL-179081]
  - netdevsim: Add devlink port resource registration (Petr Oros) [RHEL-179081]
  - netdevsim: register a new devlink param with default value interface (Petr Oros) [RHEL-179081]
  - docs: net: fix minor issues with devlink docs (Petr Oros) [RHEL-179081]
  - devlink: Warn on resource ID collision with PARENT_TOP (Petr Oros) [RHEL-179081]
  - devlink: Implement devlink param multi attribute nested data values (Petr Oros) [RHEL-179081]
  - devlink: heap-allocate param fill buffers in devlink_nl_param_fill (Petr Oros) [RHEL-179081]
  - devlink: Release nested relation on devlink free (Petr Oros) [RHEL-179081] {CVE-2026-53261}
  - devlink: pass param values by pointer (Petr Oros) [RHEL-179081]
  - devlink: Document resource scope filtering (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: Add resource dump and scope filter test (Petr Oros) [RHEL-179081]
  - devlink: Add resource scope filtering to resource dump (Petr Oros) [RHEL-179081]
  - devlink: Document port-level resources and full dump (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: Add devlink port resource doit test (Petr Oros) [RHEL-179081]
  - devlink: Add port-specific option to resource dump doit (Petr Oros) [RHEL-179081]
  - devlink: Include port resources in resource dump dumpit (Petr Oros) [RHEL-179081]
  - devlink: Add dump support for device-level resources (Petr Oros) [RHEL-179081]
  - devlink: Add port-level resource registration infrastructure (Petr Oros) [RHEL-179081]
  - devlink: Refactor resource functions to be generic (Petr Oros) [RHEL-179081]
  - devlink: Fix incorrect skb socket family dumping (Petr Oros) [RHEL-179081]
  - documentation: networking: add shared devlink documentation (Petr Oros) [RHEL-179081]
  - devlink: introduce shared devlink instance for PFs on same chip (Petr Oros) [RHEL-179081]
  - devlink: allow devlink instance allocation without a backing device (Petr Oros) [RHEL-179081]
  - devlink: add devl_warn() helper and use it in port warnings (Petr Oros) [RHEL-179081]
  - devlink: add devlink_dev_driver_name() helper and use it in trace events (Petr Oros) [RHEL-179081]
  - devlink: introduce __devlink_alloc() with dev driver pointer (Petr Oros) [RHEL-179081]
  - devlink: support index-based notification filtering (Petr Oros) [RHEL-179081]
  - devlink: support index-based lookup via bus_name/dev_name handle (Petr Oros) [RHEL-179081]
  - devlink: allow to use devlink index as a command handle (Petr Oros) [RHEL-179081]
  - devlink: avoid extra iterations when found devlink is not registered (Petr Oros) [RHEL-179081]
  - devlink: add helpers to get bus_name/dev_name (Petr Oros) [RHEL-179081]
  - devlink: expose devlink instance index over netlink (Petr Oros) [RHEL-179081]
  - devlink: Refactor devlink_rate_nodes_check (Petr Oros) [RHEL-179081]
  - devlink: Reverse locking order for nested instances (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Fix tolerance calculation in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Fix and clarify TC bandwidth split in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Set shell=True for sysfs writes in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Use Iperf3Runner in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: test devlink default params (Petr Oros) [RHEL-179081]
  - devlink: support default values for param-get and param-set (Petr Oros) [RHEL-179081]
  - devlink: refactor devlink_nl_param_value_fill_one() (Petr Oros) [RHEL-179081]
  - devlink: pass extack through to devlink_param::get() (Petr Oros) [RHEL-179081]
  - Documentation: devlink: add devlink documentation for the kvaser_usb driver (Petr Oros) [RHEL-179081]
  - Documentation: devlink: add devlink documentation for the kvaser_pciefd driver (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Make command requirements explicit (Petr Oros) [RHEL-179081]
  - i2c: designware: Add ACPI HID for DWAPB I2C controller on FUJITSU-MONAKA (Mark Salter) [RHEL-23132]
  - gpio: dwapb: Add ACPI HID for DWAPB GPIO controller on Fujitsu MONAKA (Mark Salter) [RHEL-23123]
  - new configs in net drivers (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: nxp,s32-dwmac: Use the GPR syscon (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: s32: use a syscon for S32_PHY_INTF_SEL_RGMII (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Fix PTP ref clock for Tegra234 (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: pcs: renesas,rzn1-miic: Add RZ/T2H and RZ/N2H support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_mac_irq_modify() (Izabela Bakollari) [RHEL-128151]
  - net: ethtool: mm: extract stmmac verification logic into common library (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove mac_base (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stm32 (and potentially others) resume regression (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-sophgo: Add phy interface filter (Izabela Bakollari) [RHEL-128151]
  - net: pcs: pcs-mtk-lynxi: report in-band capability for 2500Base-X (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Disable EEE RX clock stop when VLAN is enabled (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use PHY_INTF_SEL_x in functions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use PHY_INTF_SEL_x constants (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert all bitfields to GRF_FIELD*() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: replace HIWORD_UPDATE() with GRF_FIELD() (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs-plat: fix MODULE_AUTHOR (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: clean up stmmac_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: simplify set_interface() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: improve ndev->max_mtu setup readability (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use phy_intf_sel directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: pass ingenic_mac struct rather than plat_dat (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify x2000 mac_set_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify mac_set_mode() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: move "MAC PHY control register" debug (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: prep PHY_INTF_SEL_x field after switch() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify jz4775 mac_set_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: move ingenic_mac_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: validate phy_intf_sel (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: convert to PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Add hardware supported cross-timestamp (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable TSO for Agilex5 platform (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable TBS support for Agilex5 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Agilex5 EMAC platform configuration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: cleanup arguments for set_intf_mode() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: simplify set_intf_mode() implementations (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use FIELD_PREP()/FIELD_GET() for PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: convert to PHY_INTF_SEL_xxx (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add support for configuring the phy_intf_sel inputs (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add phy_intf_sel and ACTPHYIF definitions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: s32: move PHY_INTF_SEL_x definitions out of the way (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove MAC_CTRL_REG modification (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: fix incorrect phy address check (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: est: Fix GCL bounds checks (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Consider Tx VLAN offload tag length for maxSDU (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: vlan: Disable 802.1AD tag insertion offload (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: reorganise stmmac_hwif_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use != rather than ^ for comparing dev_id (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide function to lookup hwif (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use FIELD_GET() for version register (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_get_*id() into stmmac_get_version() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: consolidate version reading and validation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_get_version() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move version handling into own function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Move subsecond increment configuration in dedicated helper (Izabela Bakollari) [RHEL-128151]
  - ethernet: stmmac: dwmac-rk: Add RK3506 GMAC support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add support for controlling PCS interrupts (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink managed WoL PHY speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink-managed Wake-on-Lan (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: replace has_xxxx with core_type (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: use phy_find_first to simplify stmmac_mdio_register (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink PCS support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide PCS initialisation hook (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: only call stmmac_pcs_ctrl_ane() for integrated SGMII PCS (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: do not require snps,ps-speed for SGMII (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: hw->ps becomes hw->reverse_sgmii_enable (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move reverse-"pcs" mode setup to stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove RGMII "pcs" mode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove hw->ps xxx_core_init() hardware setup (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unused PCS loopback support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove PCS "mode" pause handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove SGMII/RGMII/SMII interrupt handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove xstats.pcs_* members (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove broken PCS code (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-rk: Fix disabling set_clock_selection (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add Eswin EIC7700 glue driver (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rename stmmac_phy_setup() to include phylink (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rearrange tc_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: avoid PHY speed change when configuring MTU (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: place .mac_finish() method more appropriately (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos-eth: move MDIO bus locking into stmmac_mdio (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Add support for Allwinner A523 GMAC200 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove stmmac_hw_setup() excess documentation parameter (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Convert open-coded register polling to helper macro (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: tc: Add HLBS drop count to taprio stats (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: est: Drop frames causing HLBS error (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PHY handling out of __stmmac_open()/release() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move initialisation of priv->tx_lpi_timer to stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PHY attachment error message into stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move xpcs clause 73 test into stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_bus_clks_config() to stmmac_platform.c (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove mac_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rework mac_interface and phy_interface documentation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: thead: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use phy_interface in stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: pcs: Kconfig: Fix unmet dependency warning (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add RZ/T2H MIIC support (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add per-SoC control for MIIC register unlock/lock (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add support to handle resets (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Make switch mode mask SoC-specific (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: move port range handling into SoC data (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Move configuration data to SoC-specific struct (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add missing include files (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Drop trailing comma from of_device_id table (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move timestamping/ptp init to stmmac_hw_setup() caller (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PTP support check into stmmac_init_timestamping() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_setup_ptp() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rename stmmac_init_ptp() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_init_ptp() messages into function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add __stmmac_release() to complement __stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: unexport stmmac_init_tstamp_counter() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stmmac_xdp_open() clk_ptp_ref error cleanup (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix PTP error cleanup in __stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: disable PTP clock after unregistering PTP (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ptp: improve handling of aux_ts_lock lifetime (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Add support for RZ/T2H SoC (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Use OF data for configuration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use PHY WoL (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use STMMAC_CSR_xxx definitions in platform glue (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: remove redundant clock rate tests (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: return clk_csr value from stmmac_clk_csr_set() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move initialisation of priv->clk_csr to stmmac_mdio (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: improve mdio register field definitions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move runtime PM into stmmac_mdio_access() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: merge stmmac_mdio_read() and stmmac_mdio_write() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move stmmac_mdio_format_addr() into read/write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide priv->gmii_address_bus_config (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide stmmac_mdio_wait() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide address register formatter (Izabela Bakollari) [RHEL-128151]
  - net: pcs: lynx: support phy-mode = "10g-qxgmii" (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: only populate plat->crosststamp when supported (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ptp: conditionally populate getcrosststamp() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: add i.MX91 support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-rk: switch to FIELD_PREP_WM16 macro (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Correct MODCTRL register offset (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: update runtime PM (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: clean up c22/c45 accessor split (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: minor cleanups to stmmac_bus_clks_config() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: use netdev_priv() directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: drop unneeded default syscon value (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove incorrect _DLY_DISABLE bit definition (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Set CIC bit only for TX queues with COE (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: xgmac: Correct supported speed modes (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stmmac_simple_pm_ops build errors (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac4: stop hardware from dropping checksum-error packets (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac4: report Rx checksum errors in status (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Correctly handle Rx checksum offload errors (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: thead: Enable TX clock before MAC initialization (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: explain the phylink_speed_down() call in stmmac_release() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add helpers to indicate WoL enable status (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use core wake IRQ support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unnecessary "stmmac: wakeup enable" print (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove redundant WoL option validation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove write-only mac->pmt (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unnecessary checks in ethtool eee ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Return early if invalid in loongson_dwmac_fix_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Change first parameter of fix_soc_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: convert to resume() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: pci: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: legacy hooks for suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide a set of simple PM ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add suspend()/resume() platform ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make variable data a u32 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: put the PHY clock on remove (Izabela Bakollari) [RHEL-128151]
  - stmmac: xsk: fix negative overflow of budget in zerocopy mode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-socfpga: Add xgmac support for Agilex5 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Add PM suspend/resume callbacks (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs: mask readl() return value to 16 bits (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs: Use devm_clk_get_optional (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: Add snps,dwmac-5.00a IP compatible string (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-sophgo: Add support for Sophgo SG2042 SoC (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use plat_dat->phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: get ls1b resource only once (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: provide match data struct (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: replace ioaddr with stmmac_priv for pcs_set_ane() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: make phy_intf_sel local (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: clean up code formatting (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: reorganise visconti_eth_set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: re-arrange speed decode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove unnecessary clk_mac (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use device rather than platform device in rk_priv_data (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: fix code formmating issue (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove pcs_get_adv_lp() support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: add ethqos_pcs_set_inband() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove obsolete .set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert px30_set_rmii_speed() to .set_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: simplify px30_set_rmii_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine .set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine clk_mac_speed rate setting functions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine rv1126 set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: add struct for programming register based speeds (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: simplify set_*_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: add get_interfaces() implementation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: improve .set_clk_tx_rate() method error message (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: extend use of snps,multicast-filter-bins property to xgmac (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: guarantee uniqueness of bus_id (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwxgmac2: Add support for HW-accelerated VLAN stripping (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stmmac_vlan: rename VLAN functions and symbol to generic symbol. (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Refactor VLAN implementation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: convert speed_mode_2500() to get_interfaces() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: move phy_interface init to tgl_common_data() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add get_interfaces() platform method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use priv->plat->phy_interface directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use a local variable for priv->phylink_config (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Add new GMAC's PCI device ID support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Add new multi-chan IP core support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Remove unused pcs-mdiodev field (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Don't check for phy to enable the SGMII adapter (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable internal GMII when using 1000BaseX (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Move queue number init to common function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: calibrate tegra with mdio bus idle (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: convert to set_clk_tx_rate() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Add DWMAC glue layer for Renesas GBETH (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: call set_phy_mode() before registration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: provide init function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: init dwmac->stmmac_rst before registration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move frag_size handling out of spin_lock (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: stop initialising plat->mac_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use PHY clock-stop capability (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: convert to set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use phy_interface_mode_is_rgmii() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: clean up interface parsing (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: clean up anarion_config_dt() error handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove ethqos->speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: set serdes speed using serdes_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove GMAC_1US_TIC_COUNTER definition (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel-plat: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: remove tegra_eqos_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: simplify clock handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-128151]
  - dt-bindings: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: thead,th1520-gmac: Describe APB interface clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: Get and enable APB clock on initialization (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: sophgo,sg2044-dwmac: Drop status from the example (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add support for Sophgo SG2044 dwmac (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: rockchip-dwmac: Add compatible string for RK3528 (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: rockchip-dwmac: Require rockchip,grf and rockchip,php-grf (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add FSD EQoS device tree bindings (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add T-HEAD dwmac support (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: snps,dwmac: add support for Arria10 (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: re-initiate clause 37 Auto-negotiation (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: rearrange register definitions (Izabela Bakollari) [RHEL-100501]
  - net: remove phylink_pcs .neg_mode boolean (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: group EEE code together (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: clean up xpcs_config_eee() (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: remove xpcs_config_eee() from global scope (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: convert to phylink managed EEE (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: add function to configure EEE clock multiplying factor (Izabela Bakollari) [RHEL-100501]
  - net: pcs: rzn1-miic: Convert to for_each_available_child_of_node() helper (Izabela Bakollari) [RHEL-100501]
  - net: pcs: rzn1-miic: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: actively unset DW_VR_MII_DIG_CTRL1_2G5_EN for 1G SGMII (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: fix DW_VR_MII_DIG_CTRL1_2G5_EN bit being set for 1G SGMII w/o inband (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: make xpcs_get_interfaces() static (Izabela Bakollari) [RHEL-100501]
  - net: pcs: lynx: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: mtk-lynxi: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-mtk-lynxi: correctly report in-band status capabilities (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-mtk-lynxi: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-lynx: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove return statements in void function (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rename xpcs_config_usxgmii() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: combine xpcs_link_up_{1000basex,sgmii}() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: replace open-coded mii_bmcr_encode_fixed() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rearrange xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove switch() in xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use generic register definitions (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move Wangxun VR_XS_PCS_DIG_CTRL1 configuration (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: correctly place DW_VR_MII_DIG_CTRL1_2G5_EN (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use dev_*() to print messages (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: convert to use read_poll_timeout() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: add _modify() accessors (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use FIELD_PREP() and FIELD_GET() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move searching ID list out of line (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rename xpcs_get_id() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move definition of struct dw_xpcs to private header (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: provide a helper to get the phylink pcs given xpcs (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: pass xpcs instead of xpcs->id to xpcs_find_compat() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: don't use array for interface (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove dw_xpcs_compat enum (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: make xpcs_do_config() and xpcs_link_up() internal (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: drop interface argument from xpcs_create*() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: add xpcs_destroy_pcs() and xpcs_create_pcs_mdiodev() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: get rid of xpcs_init_iface() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: drop interface argument from internal functions (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move PCS reset to .pcs_pre_config() (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: fix multiplication overflow when reading timestamp (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: fix dwmac1000 ptp timestamp status offset (Izabela Bakollari) [RHEL-100501]
  - stmmac: intel: interface switching support for RPL-P platform (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add initial support for RK3528 integrated PHY (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add integrated_phy_powerdown operation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Move integrated_phy_powerup/down functions (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add GMAC support for RK3528 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: block PHY RXC clock-stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: socfpga: remove phy_resume() call (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: address non-LPI resume failures properly (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Call xpcs_config_eee_mult_fact() only when xpcs is present (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Fix accessing freed irq affinity_hint (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Provide FIFO sizes for DWMAC 1000 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: stm32: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: starfive: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: allow platforms to use PHY tx clock stop capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sunxi: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sun8i: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rk: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: meson8b: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ipq806x: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: anarion: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: mediatek: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: qcom-ethqos: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary stmmac_mac_set() in stmmac_release() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove redundant racy tear-down in stmmac_dvr_remove() (Izabela Bakollari) [RHEL-100501]
  - stmmac: intel: Fix warning message for return value in intel_tsn_lane_is_available() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Remove unneeded GRF and peripheral GRF checks (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove write-only priv->speed (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add glue layer for Sophgo SG2044 SoC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: platform: Add snps,dwmac-5.30a IP compatible string (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: platform: Group GMAC4 compatible check (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: simplify phylink_suspend() and phylink_resume() calls (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: avoid shadowing global buf_sz (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: mostly remove "buf_sz" (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: Add FSD EQoS support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: interface switching support for ADL-N platform (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: configure SerDes according to the interface mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: configure SerDes on mac_finish (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: meson: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ipq806x: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rk: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: imx: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: s32: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: intel: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: starfive: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide generic implementation for set_clk_tx_rate method (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: clean up clock initialisation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: name struct plat_stmmacenet_data consistently (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: ensure divisor gives proper rate (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: use rgmii_clock() for RGMII clock rate (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Correct usage of maximum queue number macros (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: qcom-ethqos: use rgmii_clock() to set the link clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: print stmmac_init_dma_engine() errors using netdev_err() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-loongson: Add fix_soc_reset() callback (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add launch time support to XDP ZC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: "speed" passed to fix_mac_speed is an int (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove useless priv->flow_ctrl (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clarify priv->pause and pause module parameter (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Use str_enabled_disabled() helper (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove calls to xpcs_config_eee() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: call xpcs_config_eee_mult_fact() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: refactor clock management in EQoS driver (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Apply new page pool parameters when SPH is enabled (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove old EEE methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use stmmac_set_lpi_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: clear LPI_CTRL_STATUS_LPITCSE too (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add new MAC method set_lpi_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use common LPI_CTRL_STATUS bit definitions (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary LPI disable when enabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clear priv->tx_path_in_lpi_mode when disabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary priv->eee_enabled tests (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary priv->eee_active tests (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->dma_cap.eee test in tx_lpi methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: split stmmac_init_eee() and move to phylink methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: ensure LPIATE is cleared (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ensure LPI is disabled when disabling EEE (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: delete software timer before disabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Limit FIFO size by hardware capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Limit the number of MTL queues to hardware capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop redundant skb_mark_for_recycle() for SKB frags (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: convert to phylink managed EEE support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Convert prefetch() to net_prefetch() for received frames (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Optimize cache prefetch in RX path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Set page_pool_params.max_len to a precise size (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Switch to zero-copy in non-XDP RX path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: restart LPI timer after cleaning transmit descriptors (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: combine stmmac_enable_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide function for restarting sw LPI timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide stmmac_eee_tx_busy() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add stmmac_try_to_start_sw_lpi() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: check priv->eee_sw_timer_en in suspend path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: simplify TX cleanup decision for ending sw LPI mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: correct priv->eee_sw_timer_en setting (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rename stmmac_disable_sw_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: stm32: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: imx: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: Switch from CONFIG_PM_SLEEP guards to pm_sleep_ptr() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove stmmac_lpi_entry_timer_config() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: split hardware LPI timer control (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary EEE handling in stmmac_release() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move setup of eee_ctrl_timer to stmmac_dvr_probe() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use boolean for eee_enabled and eee_active (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move priv->eee_active into stmmac_eee_init() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move priv->eee_enabled into stmmac_eee_init() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->eee_tw_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: convert to use phy_eee_rx_clock_stop() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: report EEE error statistics if EEE is supported (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->tx_lpi_enabled (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clean up stmmac_disable_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove redundant code from ethtool EEE ops (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: make EEE depend on phy->enable_tx_lpi (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use unsigned int for eee_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use correct type for tx_lpi_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move tx_lpi_timer tracking to phylib (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Unexport stmmac_rx_offset() from stmmac.h (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Set dma_sync_size to zero for discarded frames (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: TSO: Simplify the code flow of DMA descriptor allocations (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-imx: add imx93 clock input support in RMII mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop useless code related to ethtool rx-copybreak (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop redundant dwxgmac_tc_ops variable (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Relocate extern declarations in common.h and hwif.h (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-dwc-qos-eth: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: set initial EEE policy configuration (Izabela Bakollari) [RHEL-100501]
  - stmmac: dwmac-intel-plat: remove redundant dwmac->data check in probe (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac_socfpga: This platform has GMAC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Configure only the relevant bits for timestamping setup (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Don't include dwmac4 definitions in stmmac_ptp (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Enable timestamping interrupt on dwmac1000 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce dwmac1000 timestamping operations (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce dwmac1000 ptp_clock_info and operations (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Only update the auto-discovered PTP clock features (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Use per-hw ptp clock ops (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Don't modify the global ptp ops directly (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Receive Watchdog Timeout is not in abnormal interrupt summary (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Fix the MTL_OP_MODE_*_MASK operation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Fix MTL_OP_MODE_RTC mask and shift macros (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add glue layer for T-HEAD TH1520 SoC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add support for dwmac 3.72a (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Enable FPE for tc-mqprio/tc-taprio (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Complete FPE support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Rename XGMAC_RQ to XGMAC_FPRQ (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Get the TC number of net_device by netdev_get_num_tc() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Refactor FPE functions to generic version (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce stmmac_fpe_supported() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Rework macro definitions for gmac4 and xgmac (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce separate files for FPE implementation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Programming sequence for VLAN packets with split header (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add DW QoS Eth v4/v5 ip payload error statistics (Izabela Bakollari) [RHEL-100501]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-260.el10]
changelog:
  - x86/mce: Set up the polling timer before CMCI discovery (Steve Best) [RHEL-239086]
  - scsi: target: Fix hexadecimal CHAP_I handling (Maurizio Lombardi) [RHEL-231666] {CVE-2026-63886}
  - thermal: core: Fix thermal zone device registration error path (Steve Best) [RHEL-226828] {CVE-2026-43332}
  - perf/arm_pmu: Skip PMCCNTR_EL0 on NVIDIA Olympus (Charles Mirabile) [RHEL-176084]
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-222582]
  - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222670] {CVE-2026-53329}
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222688] {CVE-2026-53136}
  - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222698] {CVE-2026-53143}
  - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222746] {CVE-2026-63884}
  - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222752] {CVE-2026-53356}
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222574] {CVE-2026-64219}
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222626] {CVE-2026-63879}
  - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222650] {CVE-2026-53374}
  - KVM: VMX: Disable CET by default (Aidan Wallace) [RHEL-235002]
  - KVM: VMX: introduce module parameter to disable CET (Aidan Wallace) [RHEL-235002]
  - perf/arm-cmn: Support CMN S3 r2 (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Plumb in new filter types (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Refactor event filter data (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Refactor event filter programming (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Rename filter variables for clarity (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Add workarounds for CMN-S3 on Graviton5 (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Move DTM index data out of hw_perf_event (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix resource_size_t printk specifier in arm_cmn_init_dtc() (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix incorrect error check for devm_ioremap() (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Stop claiming entire iomem region (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix DVM node events (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Reject unsupported hardware configurations (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Support CMN-600AE (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Permit more exhaustive groups (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Jeremy Linton) [RHEL-234652]
  - perf trace: Refactor augmented_raw_syscalls using bpf_for (Trevor Allison) [RHEL-183355]
  - perf trace: Factor out BPF loop body (Trevor Allison) [RHEL-183355]
  - ALSA: hda/realtek: Add quirk for TongFang X6SP45xU (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: ps: disable MSI on resume in ACP PCI driver (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/tas2781: Cancel async firmware request at unbind (Jaroslav Kysela) [RHEL-193253]
  - firmware_loader: Add cancel helper for async requests (Jaroslav Kysela) [RHEL-193253]
  - ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: scarlett2: Allow selecting config_set by firmware version (Jaroslav Kysela) [RHEL-193253]
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8183: Release reserved memory on cleanup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8183: Check runtime resume during probe (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8192: Release reserved memory on cleanup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8192: Check runtime resume during probe (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: topology: fix memory leak in snd_sof_load_topology (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: topology: validate vendor array size before parsing (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc4-control: Validate notification payload size (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: FCP: Fix NULL pointer dereference in interface lookup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count (Jaroslav Kysela) [RHEL-193253]
  - ASoC: rt5575: Use __le32 for SPI burst write address (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SDCA: Validate written enum value in ge_put_enum_double() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: clear opened when stream enable fails (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: reject stream disable with no active interface (Jaroslav Kysela) [RHEL-193253]
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Free sideband sg_table objects (Jaroslav Kysela) [RHEL-193253]
  - soundwire: intel_ace2x: release bpt_stream when close it (Jaroslav Kysela) [RHEL-193253]
  - soundwire: fix bug in sdw_add_element_group_count found by syzkaller (Jaroslav Kysela) [RHEL-193253]
  - soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral (Jaroslav Kysela) [RHEL-193253]
  - mfd: cs42l43: Sanity check firmware size (Jaroslav Kysela) [RHEL-193253]
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: avoid stale FIFO cells during resize (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: oss: Serialize readq reset state with q->lock (Jaroslav Kysela) [RHEL-193253]
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Fix kernel heap address leak in bounce_error_event() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Guard sideband endpoint removal (Jaroslav Kysela) [RHEL-193253]
  - ASoC: topology: Check PCM and DAI name strings before use (Jaroslav Kysela) [RHEL-193253]
  - ASoC: tegra: tegra210_ahub: Validate written enum value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: fsl: fsl_audmix: Validate written enum values (Jaroslav Kysela) [RHEL-193253]
  - ASoC: meson: aiu: Validate written enum values (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: hdac_hdmi: Validate written enum value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs (Jaroslav Kysela) [RHEL-193253]
  - ASoC: sma1307: Fix uevent string leaks in fault worker (Jaroslav Kysela) [RHEL-193253]
  - ALSA: aloop: Drop superfluous break (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: acp-sdw-sof: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: acp-sdw-legacy: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Clear variable event pointer on read (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Fix partial userptr event expansion (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: fix Kconfig dependency of HD Audio PCI (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Initialize offload control return value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: midi: Serialize output teardown with event_input (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (Jaroslav Kysela) [RHEL-193253]
  - ALSA: xen-front: Connect event channel after stream prepare (Jaroslav Kysela) [RHEL-193253]
  - ALSA: xen-front: Reset event channel state on stream clear (Jaroslav Kysela) [RHEL-193253]
  - ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8189: Fix probe resource cleanup (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: Fix cached processing coefficient verbs (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: conexant: Remove mic bias threshold override (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (Jaroslav Kysela) [RHEL-193253]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Roll back quirk control caches on write errors (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match (Jaroslav Kysela) [RHEL-193253] {CVE-2026-64478}
  - ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8 (Jaroslav Kysela) [RHEL-193253]
  - HID: uhid: convert to hid_safe_input_report() (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() (Benjamin Tissoires) [RHEL-170872]
  - HID: Input: Add battery list cleanup with devm action (Benjamin Tissoires) [RHEL-170872]
  - Input: add ABS_SND_PROFILE (Benjamin Tissoires) [RHEL-170872]
  - HID: wacom: Fix OOB write in wacom_hid_set_device_mode() (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo-go: drop dead NULL check on to_usb_interface() (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo-go: reject non-USB transports in probe (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: Fix buffer over-read and unaligned access in X12 Tab raw_event handler (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse (Benjamin Tissoires) [RHEL-170872]
  - HID: remove duplicate hid_warn_ratelimited definition (Benjamin Tissoires) [RHEL-170872]
  - HID: u2fzero: free allocated URB on probe errors (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Fix size_t specifier in hid_report_raw_event() (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Add support for newer Bluetooth keyboards (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix integer overflow in pidff_rescale (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: add reset quirk for BLTP7853 touchpad (Benjamin Tissoires) [RHEL-170872]
  - HID: core: introduce hid_safe_input_report() (Benjamin Tissoires) [RHEL-170872]
  - HID: pass the buffer size to hid_report_raw_event (Benjamin Tissoires) [RHEL-170872]
  - HID: google: hammer: stop hardware on devres action failure (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: run inactivity autodim from workqueues (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46202}
  - HID: appletb-kbd: fix UAF in inactivity-timer cleanup path (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46213}
  - HID: playstation: Clamp num_touch_reports (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46232}
  - HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: fix OOB write in mcp2221_raw_event() (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: really enable the intended work around for appledisplay (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-sjoy: race between init and usage (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Fix regression of input name assignment (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-quickspi: Fix some error codes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: restore OS_TYPE after resume from s2idle (Benjamin Tissoires) [RHEL-170872]
  - HID: elan: Add support for ELAN SB974D touchpad (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add missing size validation for Rock Band 3 Pro instruments (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add missing size validation for SMK-Link remotes (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: remove unneeded WARN_ON() in sony_leds_init() (Benjamin Tissoires) [RHEL-170872]
  - HID: ft260: validate i2c input report length (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: fix incorrect force-feedback check in sony_suspend() (Benjamin Tissoires) [RHEL-170872]
  - HID: core: clamp report_size in s32ton() to avoid undefined shift (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31624}
  - HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: fix race condition when accessing stale stack pointer (Benjamin Tissoires) [RHEL-170872]
  - HID: winwing: Enable rumble effects (Benjamin Tissoires) [RHEL-170872]
  - HID: core: do not allow parsing 0-sized reports (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: refactor endpoint lookup (Benjamin Tissoires) [RHEL-170872]
  - HID: huawei: fix CD30 keyboard report descriptor issue (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: validate num_touch_reports in DualShock 4 reports (Benjamin Tissoires) [RHEL-170872]
  - HID: drop 'default !EXPERT' from tristate symbols (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: fix deadlock in hid_post_reset() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-53037}
  - HID: apple: ensure the keyboard backlight is off if suspending (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (Benjamin Tissoires) [RHEL-170872]
  - HID: alps: fix NULL pointer dereference in alps_raw_event() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31625}
  - HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Standardise hid_report_enum variable nomenclature (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: update module description (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Check bounds when deleting force-feedback effects (Benjamin Tissoires) [RHEL-170872]
  - Docs: hid: intel-ish-hid: make long URL usable (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: sony: add battery status support for Rock Band 4 PS5 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: fix style issues (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: update hid-sony supported devices (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add support for more instruments (Benjamin Tissoires) [RHEL-170872]
  - bpf: Add fix for Trust Philips SPK6327 (145f:024b) modifier keys (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Huion KeyDial K20 over bluetooth (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add a BPF to get the touchpad type (Benjamin Tissoires) [RHEL-170872]
  - hid: bpf: hid_bpf_helpers: add helper for having read/write udev properties (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: handle injected report descriptor in HID-BPF (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add helper macros for LE/BE conversion (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: hid_bpf_helpers: provide a cleanup functions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix some signed vs unsigned compiler warnings (Benjamin Tissoires) [RHEL-170872]
  - Input: add keycodes for contextual AI usages (HUTRR119) (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-thc: Add more frequency support for SPI (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-quickspi: Improve power management for touch devices (Benjamin Tissoires) [RHEL-170872]
  - HID: core: use __free(kfree) and __free(kvfree) to clean up temporary buffers (Benjamin Tissoires) [RHEL-170872]
  - HID: core: factor out hid_parse_collections() (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: fix LEDS dependencies (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Add support for multiple batteries per device (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Introduce struct hid_battery and refactor battery code (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Convert battery code to devm_* (Benjamin Tissoires) [RHEL-170872]
  - HID: input: use __free(kfree) to clean up temporary buffers (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: Fix spelling mistake "Enfore" -> "Enforce" (Benjamin Tissoires) [RHEL-170872]
  - HID: pl: eliminate private debug macro (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: Add module parameter to enfoce GPIO mode (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Fix spelling mistake "configuratiion" -> "configuration" (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Remove unneeded semicolon (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Remove unneeded semicolon (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add IMU and Touchpad RO Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add RGB LED control interface (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Touchpad Mode Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Feature Status Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add MCU ID Attribute (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Lenovo Legion Go S Series HID Driver (Benjamin Tissoires) [RHEL-170872]
  - HID: Include firmware version in the uevent (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add OS Mode Toggle (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Calibration Settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add RGB LED control interface (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add FPS Mode DPI settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Rumble and Haptic Settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Feature Status Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Lenovo Legion Go Series HID Driver (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: use mcp_i2c_smbus_read for block reads (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: elan: Add parade-tc3408 timing (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_DEADBAND quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_NEG_SATURATION quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_NEG_COEFFICIENT quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Refactor field quirks detection (Benjamin Tissoires) [RHEL-170872]
  - Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Benjamin Tissoires) [RHEL-170872]
  - HID: Kysona: Add support for VXE Dragonfly R1 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 (Benjamin Tissoires) [RHEL-170872]
  - HID: roccat: fix use-after-free in roccat_report_event (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43111}
  - HID: Intel-thc-hid: Intel-quickspi: Add NVL Device IDs (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Add NVL Device IDs (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: Check to ensure report responses match the request (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43047}
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43049}
  - HID: bpf: prevent buffer overflow in hid_hw_request (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31401}
  - selftests/hid: fix compilation when bpf_wq and hid_device are not exported (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Mitigate potential OOB by removing bogus memset() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43048}
  - HID: intel-thc-hid: Set HID_PHYS with PCI BDF (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: add .resume method in PM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Enable MX Master 4 over bluetooth (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Add HID_BATTERY_QUIRK_DYNAMIC for Elan touchscreens (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Drop Asus UX550* touchscreen ignore battery quirks (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: cancel last I2C command on read error (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: Keep latency normal on deactivate for reactivation gesture (Benjamin Tissoires) [RHEL-170872]
  - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - selftests: hid: tests: test_wacom_generic: add tests for display devices and opaque devices (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: new class MT_CLS_EGALAX_P80H84 (Benjamin Tissoires) [RHEL-170872]
  - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Benjamin Tissoires) [RHEL-170872]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses (Benjamin Tissoires) [RHEL-170872]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Benjamin Tissoires) [RHEL-170872]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix condition effect bit clearing (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23349}
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Benjamin Tissoires) [RHEL-170872]
  - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23382}
  - HID: asus: avoid memory leak in asus_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31524}
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31522}
  - HID: apple: avoid memory leak in apple_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31520}
  - HID: Document memory allocation properties of report_fixup() (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add dongle device IDs for CRKD Gibson SG (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Fix wrong register fields updating (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (Benjamin Tissoires) [RHEL-170872 RHEL-183865] {CVE-2026-45877}
  - HID: logitech-hidpp: Add support for Logitech K980 (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Differentiate "invalid device index" error (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: wacom: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-sensor-hub: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: picolcd_core: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add eGalaxTouch EXC3188 support (Benjamin Tissoires) [RHEL-170872]
  - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Add FocalTech FT8112 (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add support for bluetooth Rock Band 4 PS4 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43136}
  - HID: prodikeys: Check presence of pm->input_ep82 (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43251}
  - HID: magicmouse: Do not crash on missing msc->input (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43140}
  - HID: sony: add support for Rock Band 4 PS4 and PS5 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-pl: handle probe errors (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43152}
  - HID: pidff: Do not set out of range trigger button (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add quirks for Lenovo Yoga Book 9i (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Add missing check for input_ff_create_memless (Benjamin Tissoires) [RHEL-170872] {CVE-2026-45969}
  - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards (Benjamin Tissoires) [RHEL-170872]
  - HID: rapoo: Add support for side buttons on RAPOO 0x2015 mouse (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech: add HID++ support for Logitech MX Anywhere 3S (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Filter spurious HID vendor codes on ROG laptops (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Replace magic number with HID_UP_ASUSVENDOR constant (Benjamin Tissoires) [RHEL-170872]
  - HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: work around VID/PID conflict for appledisplay (Benjamin Tissoires) [RHEL-170872]
  - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid: intel-ish-hid: Document PRODUCT_FAMILY firmware matching (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: Intel-thc-hid: Intel-quicki2c: Add power management for touch device (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Add output report support (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Support writing output report format (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Use put_unaligned_le16 for __le16 writes (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Use size_t for all length variables (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23178}
  - selftests/hid: add a test for the Digitizer/Button Type pressurepad (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: use a enum class for the different button types (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: require hidtools 0.12 (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: set INPUT_PROP_PRESSUREPAD based on Digitizer/Button Type (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23196}
  - hid: intel-thc-hid: Select SGL_ALLOC (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: fix bpf compilations due to -fms-extensions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix bpf compilation with -fms-extensions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: drop dead NULL checks in kfuncs (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Fix wrong register reading (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: Intel-thc-hid: Intel-thc: fix dma_unmap_sg() nents value (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Center initial joystick axes to prevent spurious events (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: paper over wrong bNumDescriptor field (Benjamin Tissoires) [RHEL-170872]
  - drivers: hid: renegotiate resolution multipliers with device after reset (Benjamin Tissoires) [RHEL-170872]
  - HID: evision: Fix Report Descriptor for Evision Wireless Receiver 320f:226f (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Fix probe failure when used with KVM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Remove duplicate error logging (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Add support for G Pro X Superlight 2 receiver (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid-tablet: add ABS_DISTANCE test for stylus/pen (Benjamin Tissoires) [RHEL-170872]
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix typo in HID usage table (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add the Huion Kamvas 27 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add heuristics to the Huion Inspiroy 2S eraser button (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for XP-Pen Deco02 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the XP-Pen Deco 01 V3 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Waltop Batteryless Tablet (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add fixup for Logitech SpaceNavigator variants (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: support for Huion Kamvas 16 Gen 3 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add support for Huion Kamvas 13 (Gen 3) (model GS1333) (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Inspiroy 2M (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix needs_playback check (Benjamin Tissoires) [RHEL-170872]
  - HID: corsair-void: Use %pe for printing PTR_ERR (Benjamin Tissoires) [RHEL-170872]
  - HID: elecom: Add support for ELECOM M-XT3URBK (018F) (Benjamin Tissoires) [RHEL-170872]
  - HID: winwing: Improve Orion2 throttle support (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid-alps: Format DataByte* subsection headings (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid-alps: Fix packet format section headings (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: add WQ_PERCPU to alloc_workqueue users (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Reduce JC_SUBCMD_RATE_MAX_ATTEMPTS (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-input: Extend Elan ignore battery quirk to USB (Benjamin Tissoires) [RHEL-170872]
  - HID: amd_sfh: Stop sensor before starting (Benjamin Tissoires) [RHEL-170872]
  - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: fixup Lenovo Yoga Slim 7x Keyboard rdesc (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Remove redundant pm_runtime_mark_last_busy() calls (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: add tests for missing release on the Dell Synaptics (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-debug: Fix spelling mistake "Rechargable" -> "Rechargeable" (Benjamin Tissoires) [RHEL-170872]
  - HID: Kconfig: Fix build error from CONFIG_HID_HAPTIC (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Add support for the XP-PEN Artist 24 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Rate limit IMU compensation message (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Add printk_ratelimited variants to hid_warn() etc (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Silence protocol errors on newer lightspeed receivers (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Add support for a new lightspeed receiver iteration (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lg-g15: Add hw_brightness_changed support for the G510 keyboard (Benjamin Tissoires) [RHEL-170872]
  - HID: cp2112: Add parameter validation to data length (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: intel-quicki2c: Fix wrong type casting (Benjamin Tissoires) [RHEL-170872]
  - HID: lg-g15 - Add support for Logitech G13. (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Switch to scoped_guard() in {dualsense|dualshock4}_output_worker() (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Silence sparse warnings for locking context imbalances (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Update SP preamp gain comment line (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: intel-quicki2c: support ACPI config for advanced features (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Change hid_driver to use a const char* for name (Benjamin Tissoires) [RHEL-170872]
  - HID: hidraw: tighten ioctl command parsing (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: hidraw: forge wrong ioctls and tests them (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: hidraw: add more coverage for hidraw ioctls (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: update vmtest.sh for virtme-ng (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Support DualSense audio jack event reporting (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Support DualSense audio jack hotplug detection (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Redefine DualSense input report status field (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Prefer kzalloc(sizeof(*buf)...) (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Document spinlock_t usage (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Fix all alignment and line length issues (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Correct spelling in comment sections (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Replace uint{32,16,8}_t with u{32,16,8} (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Simplify locking with guard() and scoped_guard() (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Add spaces around arithmetic operators (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Make use of bitfield macros (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add haptic multitouch support (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: add hid_haptic_switch_mode (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: add functions handling events (Benjamin Tissoires) [RHEL-170872]
  - HID: input: calculate resolution for pressure (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: initialize haptic device (Benjamin Tissoires) [RHEL-170872]
  - HID: input: allow mapping of haptic output (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: introduce hid_haptic_device (Benjamin Tissoires) [RHEL-170872]
  - Input: add FF_HAPTIC effect type (Benjamin Tissoires) [RHEL-170872]
  - HID: add haptics page defines (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix possible null pointer dereference (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: rescan the device for the group after a load/unload (Benjamin Tissoires) [RHEL-170872]
  - HID: core: factor out hid_set_group() (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Fix test in i2c_hid_core_register_panel_follower() (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Make elan touch controllers power on after panel is enabled (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Reduce PID_EFFECT_OPERATION spam (Benjamin Tissoires) [RHEL-170872]
  - HID: universal-pidff: clang-format pass (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: clang-format pass (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Define all cardinal directions (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove Anssi's email address from info msg (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Separate check for infinite duration (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Rework pidff_upload_effect (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Update debug messages (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add support for AXES_ENABLE field (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Simplify HID field/usage searching logic (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Better quirk assigment when searching for fields (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Treat PID_REQUIRED_REPORTS as count, not max (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Use ARRAY_SIZE macro instead of sizeof (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove unneeded debug (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove unhelpful pidff_set_actuators helper (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Use str_true_false() helper (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Use str_true_false() helper (Benjamin Tissoires) [RHEL-170872]
  - HID: Kconfig: Add LEDS_CLASS_MULTICOLOR dependency to HID_LOGITECH (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lg-g15: Use standard multicolor LED API (Benjamin Tissoires) [RHEL-170872]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-261.el10]
changelog:
  - mm/util: don't read __page_2 for order-1 folios in snapshot_page() (Luiz Capitulino) [RHEL-214116]
  - selftests: tls: size splice_short pipe by page size (Valentin Schneider) [RHEL-153139]
  - selftests: tls: use ASSERT_GE in test_mutliproc (Valentin Schneider) [RHEL-153139]
  - selftests: tls: add test for data loss on small pipe (Valentin Schneider) [RHEL-153139]
  - perf/aux: Fix page UAF in map_range() (Michael Petlan) [RHEL-218473] {CVE-2026-64300}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231358] {CVE-2026-64557}
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231358] {CVE-2026-64557}
  - perf build-id: Fix off-by-one bug when printing kernel/module build-id (Marek Pazur) [RHEL-122642]
  - arm_mpam: guard MBWU state before adding it to garbage (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix MPAMCFG_MBW_PBM register setting (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix software reset values of MPAMCFG_PRI (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Fix use-after-free during unmount (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Free mon_data structures on rdt_get_tree() failure (Jeremy Linton) [RHEL-218644]
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Update architecture version check for MPAM MSC (Jeremy Linton) [RHEL-218644]
  - arm64: cpufeature: Add support for the MPAM v0.1 architecture version (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Check whether the config array is allocated before destroying it (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix false positive assert failure during mpam_disable() (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Improve check for whether or not NRDY is hardware managed (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Pretend that NRDY is always hardware managed (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix monitor instance selection when checking for hardware NRDY (Jeremy Linton) [RHEL-218644]
  - arm64: dts: imx8dxl-ss-conn: delete usb3_lpcg node (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8dxl-ss-conn: Disable USB3 nodes (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62: Add RNG node (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am625: Add OLDI support (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62: Add support for AM625 OLDI IO Control (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8-ss-conn: add missed clock enet_2x_txclk for fec[1,2] (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8-ss-conn: add fsl,tuning-step for usdhc1 and usdhc2 (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8: add default clock rate for usdhc (Steve Dunnagan) [RHEL-213310]
  - crypto: iaa - fix per-node CPU counter reset in rebalance_wq_table() (Eder Zulian) [RHEL-213821]
  - dmaengine: tegra: Fix burst size calculation (Eder Zulian) [RHEL-213821]
  - dmaengine: Fix possible use after free (Eder Zulian) [RHEL-213821]
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability (Eder Zulian) [RHEL-213821]
  - dmaengine: imx-sdma: Refine spba bus searching in probe (Eder Zulian) [RHEL-213821]
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180276] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180276] {CVE-2026-43276}
  - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180091] {CVE-2026-46145}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-262.el10]
changelog:
  - smb: client: Fix use-after-free in cifs_try_adding_channels() (Paulo Alcantara) [RHEL-235460]
  - smb/client: show compress mount option (Paulo Alcantara) [RHEL-235460]
  - netfs: Fix folio_queue ENOMEM in writeback by adding a mempool (Paulo Alcantara) [RHEL-235460]
  - netfs: release readahead folios on iterator preparation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: handle single writeback rolling buffer allocation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: clear PG_private_2 on copy-to-cache append failure (Paulo Alcantara) [RHEL-235460]
  - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-235460]
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235460]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235460]
  - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-235460]
  - smb: client: free partially allocated transform folio queue (Paulo Alcantara) [RHEL-235460]
  - cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-235460]
  - smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-235460]
  - smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-235460]
  - smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-235460]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235460]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235460]
  - smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-235460]
  - smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-235460]
  - smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-235460]
  - cifs: Remove CIFSSMBSetPathInfoFB() fallback function (Paulo Alcantara) [RHEL-235460]
  - cifs: Fix and improve cifs_is_path_accessible() function (Paulo Alcantara) [RHEL-235460]
  - cifs: Show reason why autodisabling serverino support (Paulo Alcantara) [RHEL-235460]
  - scsi: smartpqi: Update version to 2.1.42-011 (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add new PCI device-ids (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add support for CCISS_BIG_PASSTHRU ioctl (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches. (Don Brace) [RHEL-224341]
  - redhat/configs: automotive: disable CONFIG_MD (Jared Kangas) [RHEL-237678]
  - mm/gup: fix GUP-fast fallback for NULL-mapping order-0 folios (Rafael Aquini) [RHEL-231964]
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227851] {CVE-2026-64560}
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227851] {CVE-2026-64370}
  - posix-timers: Expand timer_[re]arm() callbacks with a boolean return value (Waiman Long) [RHEL-227851]
  - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227851]
  - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227851]
  - drm/xe: gate observation streams with perf_allow_cpu() (Michael Petlan) [RHEL-212122]
  - perf/core: out-of-line and export perf_allow_cpu/tracepoint() (Michael Petlan) [RHEL-212122]
  - memfd: deny writeable mappings when implying SEAL_WRITE (CKI Backport Bot) [RHEL-228530] {CVE-2026-63952}
  - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191041] {CVE-2026-53195}
  - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191041] {CVE-2026-53196}
  - drm/panel: Clean up S6E3FC2X01 config dependencies (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Write REFCLK to 48MHz on DCN21 (Karol Herbst) [RHEL-180328]
  - drm/bridge: dw-hdmi-qp: Provide HDMI Vendor Specific InfoFrame (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: update used tracking kernel-doc (Karol Herbst) [RHEL-180328]
  - drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (Karol Herbst) [RHEL-180328]
  - drm/ttm/tests: add a test to exercise ttm_bo_swapout (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix EAGAIN sign in pf_migration_consume() (Karol Herbst) [RHEL-180328]
  - Revert "drm/nouveau/gsp: add support for GA100" (Karol Herbst) [RHEL-180328]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix MMIO access using PF view instead of VF view during migration (Karol Herbst) [RHEL-180328]
  - drm/i915/display: enable ccs modifiers on dg2 (Karol Herbst) [RHEL-180328]
  - drm/xe/wa: Drop redundant entries for Wa_16021867713 & Wa_14019449301 (Karol Herbst) [RHEL-180328]
  - drm/xe/xe3p_xpc: Drop stale MCR steering TODO comment (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix redundant MQD iterations in GFX v12.1 (Karol Herbst) [RHEL-180328]
  - drm/panthor: Extend VM locked region for remap case to be a superset (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check if there are kfd porcesses using adev by kfd_processes_count (Karol Herbst) [RHEL-180328]
  - dma-fence: Silence sparse warning in dma_fence_describe (Karol Herbst) [RHEL-180328]
  - drm/hisilicon/hibmc: add updating link cap in DP detect() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks() (Karol Herbst) [RHEL-180328]
  - Revert "drm/amdgpu: Init mcm_addr look up table" (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: fix kernel-doc warning for ras_eeprom_append() (Karol Herbst) [RHEL-180328]
  - drm/xe/xe_pagefault: Disallow writes to read-only VMAs (Karol Herbst) [RHEL-180328]
  - Revert "i915: don't use a vma that didn't match the context VM" (Karol Herbst) [RHEL-180328]
  - drm/drm_atomic: duplicate colorop states if plane color pipeline in use (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix kernel-doc warning for smu_msg_v1_send_msg() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix kernel-doc warning for amdgpu_ttm_alloc_mmio_remap_bo() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: remove gart_window_lock usage from gmc v12_1 (Karol Herbst) [RHEL-180328]
  - drm/sched: Remove racy hack from drm_sched_fini() (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_put() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix runtime PM imbalance issue in amdgpu_pm.c (Karol Herbst) [RHEL-180328]
  - drm/nouveau/gsp: add support for GA100 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Bound VBIOS record-chain walk loops (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix smu13 power limit default/cap calculation (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: restart the CS if some parts of the VM are still invalidated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix waiting for all submissions for userptrs (Karol Herbst) [RHEL-180328]
  - drm/xe: Clear pending_disable before signaling suspend fence (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: skip submit when primary queue is suspended (Karol Herbst) [RHEL-180328]
  - drm/xe/display: fix oops in suspend/shutdown without display (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL dereference in get_queue_ids() (Karol Herbst) [RHEL-180328]
  - drm/i915: Fix color blob reference handling in intel_plane_state (Karol Herbst) [RHEL-180328]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject NPU_OP_RESIZE commands from userspace (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject DMA commands with uninitialized length (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix arithmetic issues in dma_length() (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix IFM region index out-of-bounds in command stream parser (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Karol Herbst) [RHEL-180328]
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Fix signed integer truncation in IPC receive (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds checks for firmware log indices (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds check for firmware runtime memory (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe/nvls: Define GuC firmware for NVL-S" (Karol Herbst) [RHEL-180328]
  - drm/xe: fix job timeout recovery for unstarted jobs and kernel queues (Karol Herbst) [RHEL-180328]
  - drm/xe: fix refcount leak in xe_range_fence_insert() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: use plane color_mgmt_changed to track colorop changes (Karol Herbst) [RHEL-180328]
  - drm/atomic: track individual colorop updates (Karol Herbst) [RHEL-180328]
  - drm/colorop: make lut(1/3)d_interpolation props correctly behave as mutable (Karol Herbst) [RHEL-180328]
  - drm/colorop: Remove read-only comments from interpolation fields (Karol Herbst) [RHEL-180328]
  - drm/virtio: Fix driver removal with disabled KMS (Karol Herbst) [RHEL-180328]
  - drm/i915/edp: Check supported link rates DPCD read (Karol Herbst) [RHEL-180328]
  - drm/hyperv: During panic do VMBus unload after frame buffer is flushed (Karol Herbst) [RHEL-180328]
  - Drivers: hv: vmbus: Provide option to skip VMBus unload on panic (Karol Herbst) [RHEL-180328]
  - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check for pdd drm file first in CRIU restore path (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Karol Herbst) [RHEL-180328]
  - drm/i915/color: Fix HDR pre-CSC LUT programming loop (Karol Herbst) [RHEL-180328]
  - drm/gem: fix race between change_handle and handle_delete (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate VMBus packet size in receive callback (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate resolution_count and fix WIN8 fallback (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_fd() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Read Intel DPCD workaround register (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Karol Herbst) [RHEL-180328]
  - drm/xe: Restore IDLEDLY regiter on engine reset (Karol Herbst) [RHEL-180328]
  - drm/i915/aux: use polling when irqs are unavailable (Karol Herbst) [RHEL-180328]
  - accel/ivpu: prevent uninitialized data bug in debugfs (Karol Herbst) [RHEL-180328]
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Check that the GPU address is < 128 MiB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 (Karol Herbst) [RHEL-180328]
  - drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_18033852989 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019988906 (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix CFI failure in debugfs access (Karol Herbst) [RHEL-180328]
  - drm/xe/vf: Fix signature of print functions (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix double-free of managed BO in error path (Karol Herbst) [RHEL-180328]
  - drm/gem: Make the GEM LRU lock part of drm_device (Karol Herbst) [RHEL-180328]
  - accel/qaic: Add overflow check to remap_pfn_range during mmap (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix integer overflow in bios_get_image() (Karol Herbst) [RHEL-180328]
  - drm/bridge: megachips: remove bridge when irq request fails (Karol Herbst) [RHEL-180328]
  - drm/bridge: it66121: acquire reset GPIO in probe (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: Fix secondary queue error case (Karol Herbst) [RHEL-180328]
  - drm/virtio: use uninterruptible resv lock for plane updates (Karol Herbst) [RHEL-180328]
  - drm/i915/display: Copy color pipeline from plane in the primary joiner pipe (Karol Herbst) [RHEL-180328]
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Karol Herbst) [RHEL-180328]
  - drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-180328]
  - drm/i915: skip __i915_request_skip() for already signaled requests (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Karol Herbst) [RHEL-180328]
  - drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup (Karol Herbst) [RHEL-180328]
  - drm: Replace old pointer to new idr (Karol Herbst) [RHEL-180328]
  - drm/loongson: Use managed KMS polling (Karol Herbst) [RHEL-180328]
  - drm/xe/xelp: Fix Wa_18022495364 (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Karol Herbst) [RHEL-180328]
  - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix potential NULL deref in xe_exec_queue_tlb_inval_last_fence_put_unlocked (Karol Herbst) [RHEL-180328]
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Karol Herbst) [RHEL-180328]
  - drm/xe: Drop registration of guc_submit_wedged_fini from xe_guc_submit_wedge() (Karol Herbst) [RHEL-180328]
  - drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead of magic number (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Use EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE8 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE6 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow DCE link encoder without AUX registers (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow embedded connectors without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Add fine grained flag to SMU v13.0.6 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amd/display: properly handle family setting for early GC 11.5.4 (Karol Herbst) [RHEL-180328]
  - drm/color-mgmt: Typo s/R332/RGB332/ (Karol Herbst) [RHEL-180328]
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Only send RMA CPER when threshold is exceeded (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: avoid double drm_exec_fini() in userq validate (Karol Herbst) [RHEL-180328]
  - drm/i915/wm: Verify the correct plane DDB entry (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix parameter mismatch in panel self-refresh helper (Karol Herbst) [RHEL-180328]
  - drm/fb-helper: Fix a locking bug in an error path (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Karol Herbst) [RHEL-180328]
  - drm/panel: simple: Correct G190EAN01 prepare timing (Karol Herbst) [RHEL-180328]
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Karol Herbst) [RHEL-180328]
  - drm/imagination: Switch reset_reason fields from enum to u32 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Remove redundant NULL check in pending bad-bank list iteration (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Remove dead negative offset check in amdgpu_virt_init_critical_region() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Drop redundant queue NULL check in hang detect worker (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add default case in DVI mode validation (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Update queue properties for metadata ring (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Fix xgmi max speed reporting (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix type size of remainder argument (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Removed commented line for MQD queue priority (Karol Herbst) [RHEL-180328]
  - drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019386621 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019877138 (Karol Herbst) [RHEL-180328]
  - drm/virtio: Allow importing prime buffers when 3D is enabled (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() (Karol Herbst) [RHEL-180328]
  - dma-fence: Fix sparse warnings due __rcu annotations (Karol Herbst) [RHEL-180328]
  - drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Karol Herbst) [RHEL-180328]
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/bridge: tda998x: Use __be32 for audio port OF property pointer (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (Karol Herbst) [RHEL-180328]
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/userq: fix access to stale wptr mapping (Karol Herbst) [RHEL-180328]
  - drm/radeon: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm: Set old handle to NULL before prime swap in change_handle (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-180328]
  - drm/udl: Increase GET_URB_TIMEOUT (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Karol Herbst) [RHEL-180328]
  - drm/appletbdrm: Use kvzalloc for big allocations (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce: Prevent partial address patches (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Add upper bound check for num_of_nodes (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . (Karol Herbst) [RHEL-180328]
  - drm/amd: Add missing firmware declaration for PSP v15.0.0 (Karol Herbst) [RHEL-180328]
  - drm/amd/display: fix math_mod() using arg1 instead of arg2 (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Karol Herbst) [RHEL-180328]
  - drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property (Karol Herbst) [RHEL-180328]
  - drm/colorop: Fix blob property reference tracking in state lifecycle (Karol Herbst) [RHEL-180328]
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Add affected colorops with affected planes (Karol Herbst) [RHEL-180328]
  - drm/colorop: Preserve bypass value in duplicate_state() (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Disallow re-exporting imported GEM objects (Karol Herbst) [RHEL-180328]
  - drm/imagination: Fix segfault when updating ftrace mask (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Karol Herbst) [RHEL-180328]
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (Karol Herbst) [RHEL-180328]
  - drm/arcpgu: fix device node leak (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: replace PASID IDR with XArray (Karol Herbst) [RHEL-180328]
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CKI Backport Bot) [RHEL-178409] {CVE-2026-43501}
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill (CKI Backport Bot) [RHEL-174787] {CVE-2026-43341}
  - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172518] {CVE-2026-31786}
  - Revert "ext4: switch to using the crc32c library" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove redundant function ext4_has_metadata_csum" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sbi argument from ext4_chksum()" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sb argument from ext4_superblock_csum()" (Brian Foster) [RHEL-159116]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-263.el10]
changelog:
  - mm: consider non-anon swap cache folios in folio_expected_ref_count() (Gavin Shan) [RHEL-224504]
  - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231823] {CVE-2026-53062}
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226716] {CVE-2026-43493}
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231458] {CVE-2026-64277}
  - iommu/vt-d: Avoid WARNING in sva unbind path (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add invalidation entry_num and entry_len boundary tests (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Cover invalid read counts on vEVENTQ FD (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add boundary tests for veventq_depth (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set upper bounds on cache invalidation entry_num and entry_len (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Clarify IOAS_MAP_FILE dma-buf support (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Destroy the pages content after detaching from dmabuf (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Break the loop on failure in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_veventq_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set veventq_depth upper bound (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Move vevent memory allocation outside spinlock (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Fix the end_index calculation in __map_range_leaf() (Jerry Snitselaar) [RHEL-213791]
  - iommu: Handle unmap error when iommu_debug is enabled (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64152}
  - iommu: Fix up map/unmap debugging for iommupt domains (Jerry Snitselaar) [RHEL-213791]
  - iommu: Fix loss of errno on map failure for classic ops (Jerry Snitselaar) [RHEL-213791]
  - iommu: Ensure .iotlb_sync is called correctly (Jerry Snitselaar) [RHEL-213791]
  - iommu: Do not call drivers for empty gathers (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64151}
  - iommu/vt-d: Restore IOMMU_CAP_CACHE_COHERENCY (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Always allow DMA-FQ when iommupt provides the iommu_domain (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Avoid rewalking during map (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Directly call iommupt's unmap_range() (Jerry Snitselaar) [RHEL-213791]
  - iommu/iova: Add NULL check in iova_magazine_free() (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Optimize the gather processing for DMA-FQ mode (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64186}
  - iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix illegal device-id access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - of: reserved_mem: Allow reserved_mem framework detect "cma=" kernel param (Jerry Snitselaar) [RHEL-213791]
  - iommu: Avoid copying the user array twice in the full-array copy helper (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Do not try to iommu_map a 0 length region in swiotlb (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53164}
  - iommu/vt-d: Fix RB-tree corruption in probe error path (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix data_len byte-count vs element-count mismatch (Jerry Snitselaar) [RHEL-213791]
  - drm/tegra: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - gpu: host1x: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix premature break in init_iommu_one() (Jerry Snitselaar) [RHEL-213791]
  - iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53283}
  - iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read (Jerry Snitselaar) [RHEL-213791]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path (Jerry Snitselaar) [RHEL-213791]
  - dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE segments (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: move dma_map_resource() sanity check into debug code (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64149}
  - iommu/amd: Fix precedence order in set_dte_passthrough() (Jerry Snitselaar) [RHEL-213791]
  - iommu/pages: Fix iommu_pages_flush_incoherent() for non-x86 (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix a race with concurrent allocation and unmap (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix clone_alias() to use the original device's devid (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53053}
  - iommu/vt-d: Block PASID attachment to nested domain with dirty tracking (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53372}
  - iommufd: Fix return value of iommufd_fault_fops_write() (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: add missing `inline` for `dma_free_attrs` (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Block identity domain when SNP enabled (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Only handle IOPF for SVA when PRI is supported (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} (Jerry Snitselaar) [RHEL-213791]
  - iommufd: vfio compatibility extension check for noiommu mode (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent (Jerry Snitselaar) [RHEL-213791]
  - x86/sev: Fix broken SNP support with KVM module built-in (Jerry Snitselaar) [RHEL-213791]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (Jerry Snitselaar) [RHEL-213791]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-213791]
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Jerry Snitselaar) [RHEL-213791]
  - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210962] {CVE-2025-21834}
  - perf/x86/intel: Enable auto counter reload for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Disable PMI for self-reloaded ACR events (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Always reprogram ACR events to prevent stale masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Improve validation and configuration of ACR masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Fix OMR snoop information parsing issues (Michael Petlan) [RHEL-117335]
  - perf/x86/intel/uncore: Remove extra double quote mark (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Fix die ID init and look up bugs (Michael Petlan) [RHEL-115124] {CVE-2026-43079}
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Michael Petlan) [RHEL-115124] {CVE-2026-43344}
  - perf/x86/intel/uncore: Fix iounmap() leak on global_init failure (Michael Petlan) [RHEL-115124]
  - perf/x86/intel: Add support for rdpmc user disable feature (Michael Petlan) [RHEL-117335]
  - perf/x86: Use macros to replace magic numbers in attr_rdpmc (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for Novalake (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in NVL (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Support the 4 new OMR MSRs introduced in DMR and NVL (Michael Petlan) [RHEL-115120 RHEL-117335]
  - perf/x86/intel/uncore: Convert comma to semicolon (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add Nova Lake support (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add missing PMON units for Panther Lake (Michael Petlan) [RHEL-117337]
  - perf pmu: Relax uncore wildcard matching to allow numeric suffix (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Update DMR uncore constraints preliminarily (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support uncore constraint ranges (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support IIO free-running counters on DMR (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add freerunning event descriptor helper macro (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add domain global init callback (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add CBB PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add IMH PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Remove has_generic_discovery_table() (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support per-platform discovery base devices (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Move uncore discovery init struct to header (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/cstate: Add Diamond Rapids support (Michael Petlan) [RHEL-115122]
  - perf/x86/intel/cstate: Add Nova Lake support (Michael Petlan) [RHEL-120357]
  - perf/x86/intel/cstate: Add Wildcat Lake support (Michael Petlan) [RHEL-95668]
  - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188220] {CVE-2026-52923}
  - KVM: arm64: account pKVM reclaim against the VM mm (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Set IL in fake ESR for pKVM memory sharing exit (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Initialize parser_state before pgtable walk (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Expose shadow page tables in debugfs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Make KVM ptdump code s2 mmu aware (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore S1PIE register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore TCR2_EL1 register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - KVM: selftests: Add test for KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - drivers/virt: pkvm: Add Kconfig dependency on DMA_RESTRICTED_POOL (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename PKVM_PAGE_STATE_MASK (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest hvcs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover forced reclaim (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Register 'selftest_vm' in the VM table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest donation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add some initial documentation for pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Allow userspace to create protected VMs when pKVM is enabled (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_UNSHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_SHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add hvc handler at EL2 for hypercalls from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Return -EFAULT from VCPU_RUN on access to a poisoned pte (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reclaim faulting page from pKVM in spurious fault handler (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce hypercall to force reclaim of a protected page (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fully update VNCR fixmap state in kvm_translate_vncr() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Inject SEA TTW when desc update can't write to GPA (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Restart stage-1 walk if stage-2 desc update fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't pass host_debug_state to BRBE world-switch routines (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest donate (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest share (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make EL2 exception entry and exit context-synchronization events (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Annotate guest donations with handle and gfn in host stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Change 'pkvm_handle_t' to u16 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce host_stage2_set_owner_metadata_locked() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Generalise kvm_pgtable_stage2_set_owner() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid pointless annotation when mapping host-owned pages (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Inject SIGSEGV on illegal accesses (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Support translation faults in inject_host_exception() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Factor out pKVM host exception injection logic (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up reclaim hypercall to pkvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_reclaim_dying_guest_page() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't advertise unsupported features for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix block mapping validity check in stage-1 walker (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Roll back partial shares on kvm_share_hyp() failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid host/hyp share desync on unshare hypercall failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Free hyp-share tracking node when share hypercall fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Flush HCR_EL2.VSE to deliver SErrors to pKVM guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly identify executable PTEs at stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restore POR_EL0 access to host EL0 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restart instruction upon race in __kvm_at_s12() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wire AT S1E1A in the system instruction handling table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Key CPTR_EL2.E0POE propagation on FEAT_S1POE (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: PMU: Preserve AArch32 counter low bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __pkvm_init_vm error path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reset page order in pKVM hyp_pool (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Free private_irqs when init fails after allocation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __deactivate_fgt macro parameter typo (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Guard against NULL vcpu on VHE hyp panic path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle permission faults with guest_memfd (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle aborts from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_host_donate_guest() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove unused PKVM_ID_FFA definition (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove is_protected_kvm_enabled() checks from hypercalls (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Expose self-hosted debug regs as RAZ/WI for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up donation hypercall to pkvm_pgtable_stage2_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Split teardown hypercall into two phases (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename __pkvm_pgtable_stage2_unmap() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move handle check into pkvm_pgtable_stage2_destroy_range() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore -EAGAIN when mapping in pages for the pKVM host (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Prevent unsupported memslot operations on protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore MMU notifier callbacks for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Convert gmem_abort() to struct kvm_s2_fault_desc (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify integration of adjust_nested_*_perms() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Directly expose mapping prot and kill kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move device mapping management into kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace force_pte with a max_map_size attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move kvm_s2_fault.{pfn,page} to kvm_s2_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restrict the scope of the 'writable' attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill logging_active from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move VMA-related information to kvm_s2_fault_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill topup_memcache from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill exec_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill write_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Constrain fault_granule to kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace fault_is_perm with a helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move fault context to const structure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make fault_ipa immutable (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill fault->ipa (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clean up control flow in kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hoist MTE validation check out of MMU lock path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Optimize early exit checks in kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Initialize struct kvm_s2_fault completely at declaration (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify return logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove redundant state variables from struct kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify nested VMA shift calculation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract page table mapping in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract stage-2 permission logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Isolate mmap_read_lock inside new kvm_s2_fault_get_vma_info() helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract PFN resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce struct kvm_s2_fault to user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract VMA size resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix typo in feature check comments (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak stage-2 page-table if VM fails to init under pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable SPE Profiling Buffer when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable TRBE Trace Buffer Unit when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Read PMUVer as unsigned (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Use pmuv3_implemented() function (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned (Sebastian Ott) [RHEL-180320]
  - selftests/cgroup: include slab in test_percpu_basic memory check (Waiman Long) [RHEL-154159]
  - selftests/cgroup: fix hardcoded page size in test_percpu_basic (Waiman Long) [RHEL-154159]
  - selftests/cgroup: test_zswap: wait for asynchronous writeback (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap attempt_writeback() on 64K pagesize system (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap test_no_invasive_cgroup_shrink on large pagesize system (Waiman Long) [RHEL-154157]
  - selftests/cgroup: replace hardcoded page size values in test_zswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: rename PAGE_SIZE to BUF_SIZE in cgroup_util (Waiman Long) [RHEL-154157]
  - selftests/cgroup: use runtime page size for zswpin check (Waiman Long) [RHEL-154157]
  - selftests/cgroup: avoid OOM in test_swapin_nozswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: skip test_zswap if zswap is globally disabled (Waiman Long) [RHEL-154157]
  - selftests/cgroup: Fix error path leaks in test_percpu_basic (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix string comparison in write_test (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix cg_read_strcmp() empty string comparison (Waiman Long) [RHEL-184801]
  - selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long) [RHEL-184801]
  - selftests: cgroup: make test_memcg_sock robust against delayed sock stats (Waiman Long) [RHEL-184801]
  - selftests: cgroup: Add cg_read_key_long_poll() to poll a cgroup key with retries (Waiman Long) [RHEL-184801]
  - selftests: complete kselftest include centralization (Waiman Long) [RHEL-184801]
  - selftests/cgroup: conform test to KTAP format output (Waiman Long) [RHEL-184801]
  - selftests: memcg: increase error tolerance of child memory.current check in test_memcg_protection() (Waiman Long) [RHEL-184801]
  - selftests: memcg: allow low event with no memory.low and memory_recursiveprot on (Waiman Long) [RHEL-184801]
  - selftests/cgroup: use bash in test_cpuset_v1_hp.sh (Waiman Long) [RHEL-184801]
  - ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Antoine Tenart) [RHEL-152712]
  - ipv6: mcast: Fix use-after-free when processing MLD queries (Antoine Tenart) [RHEL-152712]
  - ipv6: anycast: insert aca into global hash under idev->lock (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in fib6_select_path() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in rt6_fill_node() (Antoine Tenart) [RHEL-152712]
  - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-152712]
  - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: refresh hdr pointer before ioam6_event() (Antoine Tenart) [RHEL-152712]
  - ipv6: route: Unregister netdevice notifier on BPF init failure (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Antoine Tenart) [RHEL-152712]
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (Antoine Tenart) [RHEL-152712]
  - ipv6: fix potential UAF caused by ip6_forward_proxy_check() (Antoine Tenart) [RHEL-152712]
  - ipv6: Fix null-ptr-deref in fib6_mtu(). (Antoine Tenart) [RHEL-152712]
  - ipv6: update route serial number on NETDEV_CHANGE (Antoine Tenart) [RHEL-152712]
  - ipv6: Implement limits on extension header parsing (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible UAF in icmpv6_rcv() (Antoine Tenart) [RHEL-152712]
  - net: ioam6: fix OOB and missing lock (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712]
  - ipv6: avoid overflows in ip6_datagram_send_ctl() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix data race in fib6_metric_set() using cmpxchg (Antoine Tenart) [RHEL-152712]
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Antoine Tenart) [RHEL-152712]
  - ipv6: prevent possible UaF in addrconf_permanent_addr() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Antoine Tenart) [RHEL-152712]
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Antoine Tenart) [RHEL-152712]
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix a race in ip6_sock_set_v6only() (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712] {CVE-2026-43186}
  - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF (Antoine Tenart) [RHEL-152712]
  - ipv6: use the right ifindex when replying to icmpv6 from localhost (Antoine Tenart) [RHEL-152712]
  - ipv6: annotate data-race in ndisc_router_discovery() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (Antoine Tenart) [RHEL-152712]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-264.el10]
changelog:
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add test cases for link and peer netns (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add python context manager for netns entering (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Create link directly in target net namespace (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Remove "net" from newlink params (Guillaume Nault) [RHEL-144808]
  - net: xfrm: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Init tunnel link-netns before registering dev (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Don't set tunnel->net in ip_tunnel_init() (Guillaume Nault) [RHEL-144808]
  - ieee802154: 6lowpan: Validate link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: Use link/peer netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Pack newlink() params into struct (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Lookup device in target netns when creating link (Guillaume Nault) [RHEL-144808]
  - accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: fix missing newline in pr_err message (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix runtime suspend deadlock when there is pending job (Peter Colberg) [RHEL-222546] {CVE-2026-43446}
  - accel/amdxdna: Split mailbox channel create function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix major version check on NPU1 platform (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix NULL pointer dereference of mgmt_chann (Peter Colberg) [RHEL-222546] {CVE-2026-23328}
  - accel/amdxdna: Fill invalid payload for failed command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use a different name for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Validate command buffer payload count (Peter Colberg) [RHEL-222546] {CVE-2026-23424}
  - accel/amdxdna: Prevent ubuf size overflow (Peter Colberg) [RHEL-222546] {CVE-2026-23280}
  - accel/amdxdna: Fix out-of-bounds memset in command slot handling (Peter Colberg) [RHEL-222546] {CVE-2026-23288}
  - accel/amdxdna: Fix command hang on suspended hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix suspend failure after enabling turbo mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dead lock for suspend and resume (Peter Colberg) [RHEL-222546] {CVE-2026-23295}
  - accel/amdxdna: Reduce log noise during process termination (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix crash when destroying a suspended hardware context (Peter Colberg) [RHEL-222546] {CVE-2026-23341}
  - accel/amdxdna: Switch to always use chained command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove buffer size check when creating command BO (Peter Colberg) [RHEL-222546]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Move RPM resume into job run function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect DPM level after suspend/resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect error code returned for failed chain command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove hardware context status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix memory leak in amdxdna_ubuf_map (Peter Colberg) [RHEL-222546] {CVE-2026-45908}
  - accel/amdxdna: Stop job scheduling across aie2_release_resource() (Peter Colberg) [RHEL-222546] {CVE-2026-45980}
  - accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() (Peter Colberg) [RHEL-222546] {CVE-2026-45931}
  - accel/amdxdna: Fix notifier_wq flushing warning (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update firmware version check for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update message DMA buffer allocation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable hardware context priority (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable temporal sharing only mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove NPU2 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove amdxdna_flush() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix potential NULL pointer dereference in context cleanup (Peter Colberg) [RHEL-222546] {CVE-2025-71308}
  - accel/amdxdna: Fix race where send ring appears full due to delayed head update (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix cu_idx being cleared by memset() during command setup (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix race condition when checking rpm_on (Peter Colberg) [RHEL-222546] {CVE-2025-71303}
  - accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Poll MPNPU_PWAITMODE after requesting firmware suspend (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Block running under a hypervisor (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix deadlock between context destroy and job timeout (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Clear mailbox interrupt register during channel creation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Treat power-off failure as unrecoverable error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dma_fence leak when job is canceled (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support preemption requests (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for telemetry data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for resource data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware specific attributes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use MSG_OP_CHAIN_EXEC_NPU when supported (Peter Colberg) [RHEL-222546]
  - drm: include drm_print.h where needed (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect command state for timed out job (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix uninitialized return value (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect return value in aie2_hwctx_sync_debug_bo() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support firmware debug buffer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support getting last hardware error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Resume power for creating and destroying hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance runtime power management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Call dma_buf_vmap_unlocked() for imported object (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() (Peter Colberg) [RHEL-222546] {CVE-2025-68731}
  - accel/amdxdna: Add ioctl DRM_IOCTL_AMDXDNA_GET_ARRAY (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use int instead of u32 to store error codes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect type used for a local variable (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a function to walk hardware contexts (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Unify pm and rpm suspend and resume callbacks (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Delete pci_free_irq_vectors() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support user space allocated buffer (Peter Colberg) [RHEL-222546]
  - drm/sched: Rename DRM_GPU_SCHED_STAT_NOMINAL to DRM_GPU_SCHED_STAT_RESET (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Revise device bo creation and free (Peter Colberg) [RHEL-222546]
  - drm/sched: Store the drm client_id in drm_sched_fence (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect PSP firmware size (Peter Colberg) [RHEL-222546]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support submit commands without arguments (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect size of ERT_START_NPU commands (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add BO import and export (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: s/drm_gem_v[un]map_unlocked/drm_gem_v[un]map/ (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Check interrupt register before mailbox_rx_worker exits (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add missing include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add MODULE_FIRMWARE() declarations (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Refactor hardware context destroy routine (Peter Colberg) [RHEL-222546]
  - drm/sched: Use struct for drm_sched_init() params (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare sched_ops as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove casting mailbox payload pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Return error when setting clock failed for npu1 (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu6_dev_priv as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add __user to second parameter of aie2_query_status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare force_cmdlist as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use rcu_access_pointer for __rcu pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare aie2_max_col as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare mailbox register base as __iomem pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu device profile as static variables (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add zero check for pad in ioctl input structures (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Read firmware interface version from registers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance power management settings (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace idr api with xarray (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add RyzenAI-npu6 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: use modern PM helpers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add include interrupt.h to amdxdna_mailbox.c (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query firmware version (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace mmput with mmput_async to avoid dead lock (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add device status for aie2 devices (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query functions (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add error handling (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add suspend and resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add command execution (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add GEM buffer object management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware resource solver (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support hardware mailbox (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a new driver for AMD AI Engine (Peter Colberg) [RHEL-222546]
  - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190192]
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190192] {CVE-2026-53246}
  - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234289] {CVE-2026-64564}
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230267] {CVE-2026-64276}
  - sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214458]
  - redhat/configs: re-enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186753]
  - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-137943]
  - rh_message.h: Disable ConnectX-10 NVLink-C2C device (Benjamin Poirier) [RHEL-211847]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192401] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186699] {CVE-2026-46113}
  - tpm_ffa_crb: access tpm service over FF-A direct message request v2 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (Jennifer Berringer) [RHEL-183180]
  - firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Honor partition info descriptor size (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Defer probe until pKVM is initialized (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Set the core device as FF-A device parent (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Register core as a platform driver (Jennifer Berringer) [RHEL-179031]
  - Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix sched-recv callback partition lookup (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Snapshot notifier callbacks under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Align RxTx buffer size before mapping (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Validate framework notification message layout (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Keep framework RX release under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Avoid collapsing NPI work from different CPUs (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Tie FF-A version checks to specific features (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Helper to check if a partition can receive REQUEST2 messages (Jennifer Berringer) [RHEL-179031]
  - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188204] {CVE-2026-52924}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171511] {CVE-2026-31669}
  - net: add prefetch() in skb_defer_free_flush() (Antoine Tenart) [RHEL-123212]
  - net: add NUMA awareness to skb_attempt_defer_free() (Antoine Tenart) [RHEL-123212]
  - net: use llist for sd->defer_list (Antoine Tenart) [RHEL-123212]
  - net: make softnet_data.defer_count an atomic (Antoine Tenart) [RHEL-123212]
  - l2tp: Drop large packets with UDP encap (Guillaume Nault) [RHEL-152732]
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152732]
  - l2tp: Fix memleak in l2tp_udp_encap_recv(). (Guillaume Nault) [RHEL-152732]
  - mpls: add missing unregister_netdevice_notifier to mpls_init (Guillaume Nault) [RHEL-152709]
  - ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152724]
  - ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: fix instaces typo in comments (CKI Backport Bot) [RHEL-152736]
  - seg6: fix lenghts typo in a comment (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: Add test cases for End.X with link-local nexthop (CKI Backport Bot) [RHEL-152736]
  - seg6: Allow End.X behavior to accept an oif (CKI Backport Bot) [RHEL-152736]
  - seg6: Call seg6_lookup_any_nexthop() from End.X behavior (CKI Backport Bot) [RHEL-152736]
  - seg6: Extend seg6_lookup_any_nexthop() with an oif argument (CKI Backport Bot) [RHEL-152736]


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-19
changelog:
  - Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
    query-response matching (RHEL-210693)


author: Olivier Fourdan <ofourdan@redhat.com> - 2.0.6-6
changelog:
  - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
    Resolves: https://redhat.atlassian.net/browse/RHEL-191884
    Resolves: https://redhat.atlassian.net/browse/RHEL-191931
    Resolves: https://redhat.atlassian.net/browse/RHEL-191945


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.0.6-7
changelog:
  - CVE fix for: CVE-2026-59679, CVE-2026-44950
    Resolves: https://redhat.atlassian.net/browse/RHEL-221946
    Resolves: https://redhat.atlassian.net/browse/RHEL-222023


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Rebase to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify %check section to run both test targets in single invocation
  - Resolves: RHEL-121667


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Eduard Abdullin <eabdullin@almalinux.org> - 14.3.1-4.4.alma.2
changelog:
  - Change to almalinux bugtracker
  - Set --with-arch_64=x86-64-v2 on v2 arch
  - Fix sysroot packages for i686 architecture


author: Joseph Myers <josmyers@redhat.com> - 14.4.1-1
changelog:
  - update from releases/gcc-14 branch (RHEL-174638)
    - GCC 14.4 release
    - PRs ada/107475, ada/123060, ada/123138, ada/123289, ada/123867,
  	ada/124226, ada/124285, ada/124607, ada/124836, ada/125044,
  	ada/125695, c/101312, c/105555, c/123018, c/123156, c/123365,
  	c/123882, c/124830, c++/65271, c++/91388, c++/97740, c++/98930,
  	c++/101670, c++/120224, c++/120685, c++/120876, c++/121445,
  	c++/121822, c++/122070, c++/122318, c++/122494, c++/122550,
  	c++/122658, c++/122772, c++/122834, c++/123346, c++/123529,
  	c++/123578, c++/123597, c++/123667, c++/123676, c++/123684,
  	c++/123814, c++/123818, c++/123845, c++/123889, c++/124489,
  	c++/124632, c++/124850, c++/125315, c++/125376, d/119799, d/120096,
  	d/121477, d/123046, d/123264, d/123349, d/123407, d/123419, d/123422,
  	d/123798, d/124026, d/125089, debug/121964, debug/123886,
  	fortran/79524, fortran/82721, fortran/84245, fortran/85352,
  	fortran/93715, fortran/93814, fortran/93832, fortran/94978,
  	fortran/95338, fortran/95879, fortran/96087, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/102430,
  	fortran/102459, fortran/102596, fortran/102619, fortran/105168,
  	fortran/106546, fortran/106946, fortran/107425, fortran/107968,
  	fortran/109788, fortran/115260, fortran/116829, fortran/119273,
  	fortran/120286, fortran/120723, fortran/121616, fortran/122046,
  	fortran/122206, fortran/124161, fortran/124450, fortran/124482,
  	fortran/124751, ipa/106260, ipa/111036, ipa/114790, ipa/116296,
  	ipa/122856, ipa/123416, ipa/125699, libstdc++/90192, libstdc++/102259,
  	libstdc++/105580, libstdc++/105857, libstdc++/109965,
  	libstdc++/114153, libstdc++/114865, libstdc++/118088,
  	libstdc++/118681, libstdc++/120029, libstdc++/120293,
  	libstdc++/120390, libstdc++/120789, libstdc++/121771,
  	libstdc++/122062, libstdc++/122567, libstdc++/122661,
  	libstdc++/122726, libstdc++/122821, libstdc++/122842,
  	libstdc++/123100, libstdc++/123147, libstdc++/123875,
  	libstdc++/123991, libstdc++/124024, libstdc++/124124,
  	libstdc++/124363, libstdc++/124568, libstdc++/125369, lto/121588,
  	lto/122515, lto/122620, middle-end/111817, middle-end/116772,
  	middle-end/120052, middle-end/120564, middle-end/121581,
  	middle-end/122624, middle-end/122689, middle-end/123175,
  	middle-end/123386, middle-end/123573, middle-end/123575,
  	middle-end/123703, middle-end/123775, middle-end/123876,
  	middle-end/123887, middle-end/123978, middle-end/124056,
  	middle-end/124250, middle-end/124491, middle-end/125146,
  	middle-end/125621, pch/14940, preprocessor/105412,
  	preprocessor/123273, rtl-optimization/106859, rtl-optimization/116053,
  	rtl-optimization/116600, rtl-optimization/120182,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123294,
  	rtl-optimization/124454, target/99930, target/105192, target/112400,
  	target/117575, target/117771, target/119079, target/119130,
  	target/120250, target/120645, target/122000, target/122097,
  	target/122223, target/122323, target/122446, target/122516,
  	target/122527, target/122695, target/122867, target/123102,
  	target/123155, target/123217, target/123271, target/123285,
  	target/123457, target/123460, target/123484, target/123521,
  	target/123548, target/123607, target/123624, target/123742,
  	target/123766, target/123779, target/123807, target/124126,
  	target/124133, target/124138, target/124236, target/124315,
  	target/124316, target/124335, target/124365, target/124366,
  	target/124705, target/124712, target/124933, target/125049,
  	target/125351, target/125409, target/125611, target/125670,
  	target/125751, target/125752, target/125795, target/125992,
  	testsuite/123004, testsuite/123353, testsuite/124682,
  	tree-optimization/107997, tree-optimization/109410,
  	tree-optimization/110043, tree-optimization/117217,
  	tree-optimization/119532, tree-optimization/119568,
  	tree-optimization/120341, tree-optimization/120560,
  	tree-optimization/120987, tree-optimization/121104,
  	tree-optimization/121776, tree-optimization/121844,
  	tree-optimization/122126, tree-optimization/122394,
  	tree-optimization/122408, tree-optimization/122793,
  	tree-optimization/122943, tree-optimization/122976,
  	tree-optimization/123061, tree-optimization/123300,
  	tree-optimization/123351, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123602,
  	tree-optimization/123636, tree-optimization/123645,
  	tree-optimization/123729, tree-optimization/123736,
  	tree-optimization/123741, tree-optimization/123864,
  	tree-optimization/124130, tree-optimization/124132,
  	tree-optimization/124135, tree-optimization/124151,
  	tree-optimization/124288, tree-optimization/124358,
  	tree-optimization/124555, tree-optimization/124627,
  	tree-optimization/124677, tree-optimization/124826,
  	tree-optimization/124868, tree-optimization/125019,
  	tree-optimization/125025, tree-optimization/125039,
  	tree-optimization/125079, tree-optimization/125431,
  	tree-optimization/125501, tree-optimization/125774


author: David Malcolm <dmalcolm@redhat.com> - 14.4.1-2
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/125674, c++/126057, fortran/97592, fortran/103367, fortran/125172,
  	fortran/125998, middle-end/126084, rtl-optimization/125173,
  	target/67459, target/105116, target/106895, target/116597,
  	target/119210, target/122948, target/124908, target/125818,
  	target/125972, target/126049, tree-optimization/120201,
  	tree-optimization/126257, tree-optimization/126262


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.4.1-3
changelog:
  - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169096)
  - Regenerate GCC 15 GTS pretty printer patches for current base


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.60.1-1
changelog:
  - Rebase to libguestfs 1.60.1
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.6-1
changelog:
  - Rebase to libnbd 1.25.6
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.7-1
changelog:
  - Rebase to libnbd 1.25.7
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057
  - Fix regression in nbd+ssh URIs caused by preceding change
    resolves: RHEL-217012


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-9
changelog:
  - nfsd: don't assume service is running when setting thread count to 0 (RHEL-174806)
  - Pass ignore_hosts to export_create() in export_read() (RHEL-223703)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Attila Lakatos <alakatos@redhat.com> - 1.11.0-9
changelog:
  - Backport: fix SSL_CONF_cmd/SSL_new ordering in OpenSSL client connect path
    Resolves: RHEL-188813


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Tomas Halman <thalman@redhat.com> - 2.12.0-3
changelog:
  - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
  - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified


author: Sumit Bose <sbose@redhat.com> - 2.13.0-1
changelog:
  - Resolves: RHEL-167873 - CVE-2026-6245 sssd: out-of-bounds read in the sssd [rhel-10.3]
  - Resolves: RHEL-154156 - SSSD needs to add Plasma Login Manager to the PAM services whitelist for the AD provider
  - Resolves: RHEL-142964 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-138905 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-123943 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-109754 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-108116 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-5049 - Detect foreign security principals in AD group members and silently ignore them


author: Sumit Bose <sbose@redhat.com> - 2.13.1-1
changelog:
  - Resolves: RHEL-183331 Rebase SSSD for RHEL 10.3
  - Resolves: RHEL-178180 'sssctl analyze --help' shows incorrect command in usage field
  - Resolves: RHEL-173663 [Regression] Cannot log in to FreeIPA account with password immediately after boot
  - Resolves: RHEL-173660 SSSD 2.13 doesn't work in offline mode, generates plenty of Permission denied errors
  - Resolves: RHEL-172303 SSSD: LDAP backend ('sssd_be') initialization fails if DNS in unresponsive
  - Resolves: RHEL-151491 SSSD kerberos plugins export symbols which clash
  - Resolves: RHEL-133013 /etc/hosts containing an entry with a name and alias but no IPv4 address results in sssd_be crash
  - Resolves: RHEL-5054 Smart card reader with pinpad fails C_Login. (CKF_PROTECTED_AUTHENTICATION_PATH not handled correctly)


author: Madhuri Upadhye <mupadhye@redhat.com> - 2.13.1-2
changelog:
  - Resolves: RHEL-190529 CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process
  - Resolves: RHEL-185008 Regression in IPA + Idp authentication with keycloak
  - Resolves: RHEL-111571 'sssctl config-check' does not work correctly for "Accessing AD with a MSA"
  - Resolves: RHEL-192054 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
  - Resolves: RHEL-192069 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-11
changelog:
  - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189377)
  - make sure documentation is updated during build for CVE-2023-52355 (RHEL-179103)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-2
changelog:
  - tools: virsh: fix crash on error (RHEL-234911)
  - conf: Include check for pci_bus in virDomainIOMMUDefEquals() (RHEL-138901)
  - qemu: introduce QEMU_CAPS_DEVICE_ARM_SMMUV3 (RHEL-138901)
  - qemu: introduce QEMU_CAPS_ARM_SMMUV3_SMMU_PER_BUS (RHEL-138901)
  - qemu: introduce QEMU_CAPS_ARM_SMMUV3_ACCEL (RHEL-138901)
  - qemu: Add support for HW-accelerated nested SMMUv3 (RHEL-138901)
  - tests: qemuxmlconfdata: provide HW-accel smmuv3 sample XML and CLI args (RHEL-138901)
  - conf: schemas: Allow '.' in schema for CPU flag name (RHEL-222549)
  - tests: capabilityschemadata: Add a real test example (RHEL-222549)
  - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622)


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-3
changelog:
  - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242545)
  - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242545)
  - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242545)
  - qemu: Remove 'allowReboot' field (RHEL-242545)
  - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242545)
  - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242545)
  - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242545)
  - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242545)
  - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242545)
  - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242545)
  - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242545)
  - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242545)
  - Add support for keeping VM running when panic notifier is used (RHEL-242545)
  - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-185108)
  - qemu: move qemuAgent*InfoFormatParams to hypervisor/qemu_agent.c (RHEL-235731)
  - Add guest device info to virDomainGetGuestInfo (RHEL-235731)
  - qemu_agent: Introduce guest-get-devices (RHEL-235731)
  - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-235731)
  - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-235731)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-235731)


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-4
changelog:
  - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (CVE-2026-18917, RHEL-245273)


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Michal Ruprich <mruprich@redhat.com> - 2.1.148-4
changelog:
  - DoS or arbitrary code execution via maliciously crafted LYB binary blob
  - Resolves: RHEL-177026 - CVE-2026-44673


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.0-1
changelog:
  - Update to 2.87.0
  - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.5-1
changelog:
  - RHEL-159874 - Rebase mingw-glib2 to 2.87.5
  - RHEL-159187 - CVE-2025-14087 mingw-glib2: GLib: Buffer underflow in GVariant parser leads to heap corruption
  - Drop 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch see https://bugzilla.redhat.com/show_bug.cgi?id=2431179


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.89.2-1
changelog:
  - Rebase mingw-glib2 to 2.89.2
  - RHEL-212173 - CVE-2026-58010
  - RHEL-212180 - CVE-2026-58011
  - RHEL-212207 - CVE-2026-58012
  - RHEL-212231 - CVE-2026-58013
  - RHEL-190607 - CVE-2026-58014
  - RHEL-212243 - CVE-2026-58015
  - RHEL-190612 - CVE-2026-58016


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-4.el10]
changelog:
  - spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
  - tests: py: Update payload records (Phil Sutter) [RHEL-128553]
  - tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
  - tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
  - netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
  - netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
  - netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
  - expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
  - intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
  - mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
  - mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
  - segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]


author: Phil Sutter <psutter@redhat.com> [1.1.5-6.el10]
changelog:
  - tests: Prepare exit codes for automake (Phil Sutter) [RHEL-179035]
  - parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-179035]
  - intervals: Fix for inconsistent union field use (Phil Sutter) [RHEL-179035]


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Jan Macku <jamacku@redhat.com> 1.68.0-6
changelog:
  - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159548 - CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-159527 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-9
changelog:
  - RHEL-159435 - CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-10
changelog:
  - RHEL-157876 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Jonathan Wright <jonathan@almalinux.org> - 2:1.26.3-10.alma.1
changelog:
  - AlmaLinux changes: Fix CVE-2026-42945 Buffer overrun in rewrite module
    via arguments in replacement strings


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-12
changelog:
  - Fixes CVE-2026-9256, CVE-2026-42055 and HTTP/2: Remote Denial of Service
    via compression bomb and Slowloris-style attack


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Jan Vaclav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - Add support for configuring ipip tunnel in nmstate RHEL-79801
  - Fix error when modify port list of down interface RHEL-52334
  - Add support for mtu-lock route option RHEL-151844
  - ipv4: Add new parameter prefix-route-metric RHEL-147209


author: Rahul Rajesh <rajeshrah22@gmail.com> - 2.2.61-1
changelog:
  - Upgrade to 2.2.61
  - Support referring alt-name in `copy-mac-from` property. RHEL-145074
  - Fix validation of conflicting routes in kernel mode. RHEL-124835
  - Update GPG public key


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.61-2
changelog:
  - Fix copy-mac-from for down interfaces
  - Fix copy-mac-from failing when source interface is down. RHEL-145074
  - Fix OriginalName link match for stacked interfaces. RHEL-167955


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Than Ngo <than@redhat.com> - 3.27.0-1
changelog:
  - Resolves: RHEL-171557, Fix CVE-2026-40253
  - Resolves: RHEL-169193, Fix syslog warning even for identically configured control points
  - Resolves: RHEL-157535, openCryptoki soft token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-157678, openCryptoki CCA token: support PKCS #11 V3.2 ML-DSA
  - Resolves: RHEL-157805, openCryptoki EP11 token: support PKCS #11 V3.2 ML-DSA and ML-KEM
  - Resolves: RHEL-136094, Update to 3.27.0


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jan Kuřík <jkurik@redhat.com> - 7.1.5-5
changelog:
  - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213661)
  - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213692)
  - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213717)
  - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213726)


author: Jan Kuřík <jkurik@redhat.com> - 7.1.5-6
changelog:
  - Backport remaining PCP security hardening fixes from private-pcp
  - pmieconf and pmlogmv command injection hardening (CWE-78)
  - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195)
  - timezone and zoneinfo string validation
  - pmdaroot peer credential verification (CWE-403)
  - pmproxy REST CERT_REQD enforcement and logger servlet authentication


author: Paul Howarth <paul@city-fan.org> - 2.14-1
changelog:
  - Update to 2.14 (rhbz#2161420)
    - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
  - Use SPDX-format license tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 0.14-21
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Drop redundant buildroot cleaning in %install section
  - Drop support for old Perl versions needing XS helper


author: Michal Josef Špaček <mspacek@redhat.com> - 6.16-1
changelog:
  - 6.16 bump
  - Fix minimal version of IO::Socket::IP
  - Fix requires/provided modules in *tests package


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 20231003.0-1
changelog:
  - Update to 20231003.0 (rhbz#2241845)
    - On Windows, avoid hang under IPCRUNDEBUG (GH#157)
    - Refresh "cpanfile" from Makefile.PL, to allow use on Windows
    - Normalize shebangs to /usr/bin/perl (GH#163)
    - Fix or skip all tests recently seen to fail on Windows
    - Include t/result.t in releases
    - Make full_result() and result() Windows behavior match non-Windows (GH#168)


author: Paul Howarth <paul@city-fan.org> - 0.142-1
changelog:
  - Update to 0.142
    Deprecations
    - Tilde expansion is deprecated due to inconsistent and bug-prone behavior
    Bug fixes
    - Prevent expansion of tildes that are not the very first character (e.g.
      "./~foo")
    - Prevent unintentional tilde expansion during internal path processing
    - Escape non-tilde glob characters before tilde expansion
    - Fixed spew/edit to a long filename approaching the filesystem length limit
    - Internal calls to 'print' are checked for possible errors
    - Internal read calls are checked for errors
    Changes
    - Path stringification now adds "./" in front of paths starting with literal
      tilde so they will round-trip; FREEZE updated to use this stringification
      rule as well
    - 'move' now uses File::Copy::move internally instead of the built-in
      'rename', allowing it to work across filesystems; it also returns an object
      for the moved location, allowing chaining
    - edit_lines_raw now uses a buffered raw I/O layer
    - edit_lines_utf8 now prefers PerlIO::utf8_strict, if available
    - lines_utf8 now consistently uses a buffered I/O layer
    - open*_utf8 now prefers PerlIO::utf8_strict, if available
    - slurp_utf8 now consistently uses an unbuffered I/O layer
    Documented
    - Changed all raw/UTF-8 layer descriptions in method documentation to match
      the code
    - Fixed SYNOPSIS syntax
    - Documented how to disable TMPDIR when making temp files/dirs
    Testing
    - Add additional tilde stringification testing
    - Fixed tilde expansion tests on Windows
    - Skip a problematic test case on Cygwin


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-5.el10.s390x macro
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 0.001013-21
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.202-1
changelog:
  - Update to 1.202 (rhbz#2158345)
    - Converted to Dist::Zilla
    - Test::Deep will now require v5.12, and this may go up; this change allows
      simplification of the Makefile.PL, which was coping with a mistake made
      twelve years ago
  - Use SPDX-format license tag
  - Package LICENSE file


author: Paul Howarth <paul@city-fan.org> - 1.204-1
changelog:
  - Update to 1.204 (rhbz#2159015)
    - Try to avoid clobbering global error variables when loading test libraries
    - hash_each now enumates keys in sort() order, to make errors more consistent


author: Paul Howarth <paul@city-fan.org> - 0.7000-1
changelog:
  - Update to 0.70
    - Stop pointless use of taint-mode in tests, so tests pass when perl is
      built without taint support


author: Paul Howarth <paul@city-fan.org> - 0.7100-1
changelog:
  - Update to 0.71
    - Document and test different behavior regarding Booleans in perl 5.38.0
      compared to earlier versions (GH#21)


author: Paul Howarth <paul@city-fan.org> - 0.43-23
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Fix permissions verbosely
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.032-1
changelog:
  - Update to 0.032
    - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
      temporarily turning failures into reports


author: Paul Howarth <paul@city-fan.org> - 0.033-1
changelog:
  - Update to 0.033
    - Add Test2 compatibility in the test triggered by done_testing()
    - New long-awaited feature (!!!) "allow_patterns", to either
      temporarily or globally exempt particular warning patterns


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Jindrich Novy <jnovy@redhat.com> - 7:6.1.0-2
changelog:
  - Rebuild for Go and security fixes
  - Resolves: RHEL-190079, RHEL-190852, RHEL-241124, RHEL-241361, RHEL-241463, RHEL-241829, RHEL-241930, RHEL-242162


author: Marek Kasik <mkasik@redhat.com> - 24.02.0-9
changelog:
  - Revert previous commit as it is incomplete yet
  - and other fixes need to go in
  - Reverts: RHEL-145379


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 16.14-1
changelog:
  - Update to 16.14
  - Add BuildRequires: perl(FindBin) for Perl 5.40 compatibility
  - Resolves: RHEL-208694


author: Filip Janus <fjanus@redhat.com> - 16.14-2
changelog:
  - Enable PQC-compatible TLS group negotiation via ssl_ecdh_curve
  - Backport SSL_CTX_set1_groups_list() from PG18 (upstream commit 3d1ef3a15c3)
  - Backport SSLerrmessageExt() helper for improved error reporting
  - Update GUC description to document colon-separated group list support
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 16.14-3
changelog:
  - Add SSL test coverage for colon-separated ssl_ecdh_curve group list
  - Backport test from upstream commit 3d1ef3a15c3 (adapted for PG16)
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


