# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-250.el10]
changelog:
  - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189660] {CVE-2026-23168}
  - PCI/TPH: Expose pcie_tph_get_st_table_loc() (CKI Backport Bot) [RHEL-186643]
  - PCI/TPH: Expose pcie_tph_get_st_table_size() (CKI Backport Bot) [RHEL-186643]
  - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-179033]
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-183513]
  - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-183513] {CVE-2026-31554}
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-183513] {CVE-2026-31555}
  - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-183513] {CVE-2026-23415}
  - tools: ynl: cli: order set->list conversion in JSON output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-route sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-addr sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ethtool sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert devlink sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add netdevsim wrapper library for YNL tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert tc and tc-filter-add samples to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-link sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ovs sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert netdev sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: move samples to tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add uns-admin-perm to genetlink (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Fill out operation attributes (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add sub-messages (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Update attribute sets (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add definitions (Hangbin Liu) [RHEL-156508]
  - doc/netlink: netlink-raw: Add max check (Hangbin Liu) [RHEL-156508]
  - tools: ynl: produce kselftest-list.txt from tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: support INSTALL_PATH in the tests Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests in /usr/bin/ (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rename TESTS variable to TEST_PROGS (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: make the output compact (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: Makefile's install target now installs ynltool (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: suppress jobserver warning in ynltool version detection (Hangbin Liu) [RHEL-156508]
  - tools: ynl: render event op docs correctly (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: print reply in combined format if possible (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: extract the event/notify handling in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: factor out --list-attrs / --doc handling (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: add --doc as alias to --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: improve --help (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: wrap the doc text if it's long (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: introduce formatting for attr names in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: Fix remaining pylint warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint None, type, dict, generators, init (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint warnings for returns, unused, redefined (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: suppress unhelpful pylint messages (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint issues in ynl_gen_rst (Hangbin Liu) [RHEL-156508]
  - tools: ynl: ethtool: fix pylint issues (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix logic errors reported by pylint (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint global variable related warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint misc warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint dict, indentation, long lines, uninitialised (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint exception warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint redefinition, encoding errors (Hangbin Liu) [RHEL-156508]
  - tools: ynl: pylint suppressions and docstrings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev: clarify the page pool API a little (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix build on systems with old kernel headers (Hangbin Liu) [RHEL-156508]
  - ynl: samples: Fix spelling mistake "failedq" -> "failed" (Hangbin Liu) [RHEL-156508]
  - ynl: fix schema check errors (Hangbin Liu) [RHEL-156508]
  - ynl: fix a yamllint warning in ethtool spec (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add a lint makefile target (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add schema checking (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add big-endian byte-order for u32 IPv4 addresses (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add YNL test framework (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: add function prefix argument (Hangbin Liu) [RHEL-156508]
  - ynl: samples: add tc filter example (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Display enum values in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Parse nested attributes in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Add --list-attrs option to show operation attributes (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: ignore *.d deps files (Hangbin Liu) [RHEL-156508]
  - netlink: specs: support ipv4-or-v6 for dual-stack fields (Hangbin Liu) [RHEL-156508]
  - tools: ynl: Add MAC address parsing support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: remove -lmnl from link flags (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: correct install in Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add traffic distribution balance (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add qstats support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add page-pool stats (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: create skeleton for the C command (Hangbin Liu) [RHEL-156508]
  - tools: ynl: call nested attribute free function for indexed arrays (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev add missing stats to qstat-get (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rework the string representation of NlError (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix indent issues in the main Python lib (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix string attribute length to include null terminator (Hangbin Liu) [RHEL-156508]
  - tools: ynl: avoid print_field when there is no reply (Hangbin Liu) [RHEL-156508]
  - netlink: specs: explicitly declare block scalar strings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix if-idx attribute type (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fou: change local-v6/peer-v6 check (Hangbin Liu) [RHEL-156508]
  - netlink: specs: enforce strict naming of properties (Hangbin Liu) [RHEL-156508]
  - netlink: specs: tc: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: rt-link: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: ovs_flow: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: nfsd: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - docs: netlink: index.rst: add a netlink index file (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix a couple of yamllint warnings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: wrap long doc lines (>80 chars) (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up indentation errors (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up truthy values (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up spaces before comments (Hangbin Liu) [RHEL-156508]
  - netlink: specs: clean up spaces in brackets (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add doc start markers to yaml (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix missing doc (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: use big-endian netlink attribute types (Hangbin Liu) [RHEL-156508]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-251.el10]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188089]
  - riscv: mm: Fix conflict in arch_tlbbatch_add_pending() (Jennifer Berringer) [RHEL-212287]
  - arm64: dts: s32g3: Fix SWT8 watchdog address (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Jared Kangas) [RHEL-212089]
  - iio: core: fix uninitialized data in debugfs (Jared Kangas) [RHEL-212089]
  - iio: buffer: Move from int64_t to s64 for timestamp (Jared Kangas) [RHEL-212089]
  - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Jared Kangas) [RHEL-212089]
  - iio: Replace 'sign' field with union in struct iio_scan_type (Jared Kangas) [RHEL-212089]
  - iio: buffer: ensure repeat alignment is a power of two (Jared Kangas) [RHEL-212089]
  - iio: buffer: cache timestamp offset in scan buffer (Jared Kangas) [RHEL-212089]
  - iio: buffer: check return value of iio_compute_scan_bytes() (Jared Kangas) [RHEL-212089]
  - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Jared Kangas) [RHEL-212089]
  - iio: core: Simplify IIO core managed APIs (Jared Kangas) [RHEL-212089]
  - iio: inkern: call iio_device_put() only on mapped devices (Jared Kangas) [RHEL-212089]
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Jared Kangas) [RHEL-212089]
  - dmaengine: of_dma: Add devm_of_dma_controller_register() (Jared Kangas) [RHEL-212089]
  - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: drop unused module alias (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Jared Kangas) [RHEL-212089]
  - i2c: imx: zero-initialize dma_slave_config for eDMA (Jared Kangas) [RHEL-212089]
  - i2c: imx: ensure no clock is generated after last read (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix i2c issue when reading multiple messages (Jared Kangas) [RHEL-212089]
  - i2c: imx: preserve error state in block data length handler (Jared Kangas) [RHEL-212089]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155388]
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-191988]
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193520] {CVE-2026-52973}
  - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-193670]
  - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-193670]
  - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-193670]
  - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-193670]
  - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-193670]
  - hwmon: Add label support for 64-bit energy attributes (Jared Kangas) [RHEL-193670]
  - hwmon: Introduce 64-bit energy attribute support (Jared Kangas) [RHEL-193670]
  - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - pwm: Add the S32G support in the Freescale FTM driver (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Drop driver local locking (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Jared Kangas) [RHEL-210979]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-189741]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-189741]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-190427]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-190428]
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189607] {CVE-2025-71147}
  - gpio: pca953x: propagate regulator_enable() error from resume (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: mask interrupts in irq shutdown (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: pca953x: clarify interrupt source detection (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TCAL6408 TCAL6416 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: gpio-pca95xx: Add tcal6408 and tcal6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: add TCAL6408 and TCAL6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: Add a compatibility and feature list for PCA953x (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: clarify log messages about auto increment feature (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-190842]
  - gpio: Kconfig: Update help for GPIO_PCA953X (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use regmap_update_bits() to improve performance (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TI TCA6418 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add TI TCA6418 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add Toradex ecgpiol16 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use value returning setters (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-190842]
  - crypto: testmgr - Ignore EEXIST on shash allocation (Thomas Huth) [RHEL-153093]
  - crypto: api - Redo lookup on EEXIST (Thomas Huth) [RHEL-153093]
  - sched_ext: Convert scx_dump_state() spinlock to raw spinlock (Herton R. Krzesinski) [RHEL-184683]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179292] {CVE-2026-46099}
  - dt-bindings: rtc: pcf85063: remove quartz-load-femtofarads restriction for nxp,pcf85063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: scope pcf85063_config structures (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: convert from round_rate() to determine_rate() (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: fix incorrect maximum clock rate handling (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: add support for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: create pcf85063_i2c_probe (CKI Backport Bot) [RHEL-190843]
  - dt-bindings: rtc: pcf85063: add binding for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: replace dev_err+return with return dev_err_probe (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: do a SW reset if POR failed (CKI Backport Bot) [RHEL-190843]
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188778] {CVE-2025-54518}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185959]
  - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189653] {CVE-2026-23110}
  - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-183433]
  - iommu: Warn on premature unblock during DMA aliased sibling reset (Eder Zulian) [RHEL-188931]
  - iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset (Eder Zulian) [RHEL-188931] {CVE-2026-52952}
  - iommu: Fix ATS invalidation timeouts during __iommu_remove_group_pasid() (Eder Zulian) [RHEL-188931]
  - iommu: Fix nested pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Replace per-group resetting_domain with per-gdev blocked flag (Eder Zulian) [RHEL-188931]
  - iommu: Fix kdocs of pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188552] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188465] {CVE-2026-53016}
  - crypto: qat - clear AES key schedule from stack (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - cancel work on re-enable SR-IOV timeout (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use 2-arg strscpy where destination size is known (Vladislav Dronov) [RHEL-115836]
  - PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - validate RSA CRT component lengths (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - simplify adf_service_mask_to_string helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add KPT support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use pci logging variants for PCI-specific messages (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - protect service table iterations with service_lock (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix restarting state leak on allocation failure (Vladislav Dronov) [RHEL-115836]
  - Documentation: qat_rl: make rate limiting wording clearer (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - handle sysfs-triggered reset callbacks (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - factor out AER reset helpers (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - skip restart for down devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - centralize bus master enable (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - notify fatal error before AER reset preparation (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - keep VFs enabled during reset (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove MODULE_VERSION (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - rename adf_ctl_drv.c to adf_module.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove unused character device and IOCTLs (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix heartbeat error injection (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix IRQ cleanup on 6xxx probe failure (Vladislav Dronov) [RHEL-115836] {CVE-2026-46060}
  - crypto: qat - use swab32 macro (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - replace scnprintf() with sysfs_emit() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix type mismatch in RAS sysfs show functions (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix compression instance leak (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use acomp_tfm_ctx() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 420xx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add anti-rollback support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add wireless mode support for QAT GEN6 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix firmware loading failure for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix indentation of macros in qat_hal.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Drop redundant local variables (Vladislav Dronov) [RHEL-115836]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [partial] (Vladislav Dronov) [RHEL-115836]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [partial] (Vladislav Dronov) [RHEL-115836]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Vladislav Dronov) [RHEL-115836]
  - zstd: Import upstream v1.5.7 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - convert to common field_get() helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - #undef field_get() before local definition (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add non-constant field_{prep,get}() helpers (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add less-checking __FIELD_{GET,PREP}() (Vladislav Dronov) [RHEL-115836]
  - bitfield: Ensure the return values of helper functions are checked (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Remove dst_null support (Vladislav Dronov) [RHEL-115836]
  - qat: don't mess with ->d_name (Vladislav Dronov) [RHEL-115836]
  - lib/string_choices: Rearrange functions in sorted order (Vladislav Dronov) [RHEL-115836]
  - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178253]
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178253]
  - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178253] {CVE-2026-31635}
  - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31633}
  - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31632}
  - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178253] {CVE-2026-31631}
  - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178253] {CVE-2026-46039}
  - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178253] {CVE-2026-46085}
  - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-46012}
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178253]
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178253] {CVE-2026-43500}
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178253] {CVE-2026-46000}
  - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178253] {CVE-2026-31676}
  - Revert "Disable CET when calling tboot shutdown procedure." (Tony Camuso) [RHEL-177961]
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179862] {CVE-2026-46227}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172678] {CVE-2026-43038}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174199] {CVE-2026-43186}
  - redhat: disable XEN_PRIVCMD and XENFS (Vitaly Kuznetsov) [RHEL-172496] {CVE-2026-31788 CVE-2026-31787}
  - selftests: fib_nexthops: test stale has_v4 on nexthop replace (Guillaume Nault) [RHEL-152711]
  - nexthop: fix IPv6 route referencing IPv4 nexthop (Guillaume Nault) [RHEL-152711]
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump (Guillaume Nault) [RHEL-152711]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152711]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152711]
  - net: ipv4: fix ARM64 alignment fault in multipath hash seed (Guillaume Nault) [RHEL-152711]
  - selftests: net: add ICMP error source address test over xfrm tunnel (Guillaume Nault) [RHEL-152711]
  - icmp: fix ICMP error source address when xfrm policy matches (Guillaume Nault) [RHEL-152711]
  - icmp: prevent possible overflow in icmp_global_allow() (Guillaume Nault) [RHEL-152711]
  - ping: annotate data-races in ping_lookup() (Guillaume Nault) [RHEL-152711]
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (Guillaume Nault) [RHEL-152711]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152711]
  - inet: ping: Fix icmp out counting (Guillaume Nault) [RHEL-152711]
  - selftests: fib_nexthops: Add test cases for error routes deletion (Guillaume Nault) [RHEL-152711]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152711]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (Guillaume Nault) [RHEL-152711]
  - inet: frags: add inet_frag_queue_flush() (Guillaume Nault) [RHEL-152711]
  - inet: frags: avoid theoretical race in ip_frag_reinit() (Guillaume Nault) [RHEL-152711]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168076] {CVE-2026-31419}
  - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names (David Thompson) [RHEL-167064]
  - page_pool: store detach_time as ktime_t to avoid false-negatives (Paolo Abeni) [RHEL-152734]
  - net: Fix rcu_tasks stall in threaded busypoll (Paolo Abeni) [RHEL-152734]
  - net: consume xmit errors of GSO frames (Paolo Abeni) [RHEL-152734]
  - net: Drop the lock in skb_may_tx_timestamp() (Paolo Abeni) [RHEL-152734]
  - net: remove WARN_ON_ONCE when accessing forward path array (Paolo Abeni) [RHEL-152734]
  - net: gro: fix outer network offset (Paolo Abeni) [RHEL-152734]
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152734]
  - linkwatch: use __dev_put() in callers to prevent UAF (Paolo Abeni) [RHEL-152734]
  - net: fix segmentation of forwarding fraglist GRO (Paolo Abeni) [RHEL-152734]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Paolo Abeni) [RHEL-152734]
  - net: update netdev_lock_{type,name} (Paolo Abeni) [RHEL-152734]
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Paolo Abeni) [RHEL-152734]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152734]
  - net: gro: clear skb_shinfo(skb)->hwtstamps in napi_reuse_skb() (Paolo Abeni) [RHEL-152734]
  - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS (Paolo Abeni) [RHEL-152734]
  - net: dst_metadata: fix IP_DF bit not extracted from tunnel headers (Paolo Abeni) [RHEL-152734]
  - netlink: support dumping IPv4 multicast addresses (Hangbin Liu) [RHEL-123730]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-252.el10]
changelog:
  - Revert "selftests/pidfd: add tests for PIDFD_SELF_*" (John J Coleman) [RHEL-214159]
  - Revert "selftests/mm: Use PKEY_UNRESTRICTED macro" (John J Coleman) [RHEL-214159]
  - Revert "selftests/powerpc: Use PKEY_UNRESTRICTED macro" (John J Coleman) [RHEL-214159]
  - Revert "selftest/powerpc/mm/pkey: fix build-break introduced by commit 00894c3fc917" (John J Coleman) [RHEL-214159]
  - Revert "selftests/mm: fix faulting-in code in pagemap_ioctl test" (John J Coleman) [RHEL-214159]
  - Bluetooth: btusb: MT7925: Add VID/PID 13d3/3609 (Jiri Benc) [RHEL-191262]
  - redhat/configs: enable CONFIG_SERIAL_8250_MT6577 (Jiri Benc) [RHEL-191347]
  - serial: 8250_mtk: Add ACPI support (Jiri Benc) [RHEL-191347]
  - serial: 8250_mtk: Enable baud clock and manage in runtime PM (Jiri Benc) [RHEL-191347]
  - serial: 8250_platform: Remove unneeded ->iotype assignment (Jiri Benc) [RHEL-191347]
  - usb: typec: ucsi: skip connector validation before init (Desnes Nunes) [RHEL-147800]
  - usb: host: xhci-sideband: delegate offload_usage tracking to class drivers (Desnes Nunes) [RHEL-147800]
  - usb: core: use dedicated spinlock for offload state (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure (Desnes Nunes) [RHEL-147800] {CVE-2026-31754}
  - usb: dwc3: imx8mp: fix memory leak on probe failure path (Desnes Nunes) [RHEL-147800]
  - usb: ulpi: fix memory leak on ulpi_register() error paths (Desnes Nunes) [RHEL-147800] {CVE-2026-46109}
  - usb: ulpi: fix double free in ulpi_register_interface() error path (Desnes Nunes) [RHEL-147800] {CVE-2026-31759}
  - usb: misc: usbio: Fix URB memory leak on submit failure (Desnes Nunes) [RHEL-147800] {CVE-2026-31757}
  - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (Desnes Nunes) [RHEL-147800] {CVE-2026-31755}
  - usb: core: phy: avoid double use of 'usb3-phy' (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add MeiG Smart SRM825WN (Desnes Nunes) [RHEL-147800]
  - dt-bindings: connector: add pd-disable dependency (Desnes Nunes) [RHEL-147800]
  - usb: typec: thunderbolt: Set enter_vdo during initialization (Desnes Nunes) [RHEL-147800]
  - usb: typec: Remove alt->adev.dev.class assignment (Desnes Nunes) [RHEL-147800]
  - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() (Desnes Nunes) [RHEL-147800] {CVE-2026-31756}
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Desnes Nunes) [RHEL-147800]
  - cdc-acm: new quirk for EPSON HMD (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: validate connector number in ucsi_notify_common() (Desnes Nunes) [RHEL-147800] {CVE-2026-31729}
  - usb: usbtmc: Flush anchored URBs in usbtmc_release (Desnes Nunes) [RHEL-147800] {CVE-2026-31758}
  - USB: serial: io_edgeport: add support for Blackbox IC135A (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add support for Rolling Wireless RW135R-GL (Desnes Nunes) [RHEL-147800]
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed (Desnes Nunes) [RHEL-147800]
  - usb: roles: get usb role switch from parent only for usb-b-connector (Desnes Nunes) [RHEL-147800]
  - Revert "tcpm: allow looking for role_sw device in the main node" (Desnes Nunes) [RHEL-147800]
  - usb: typec: altmode/displayport: set displayport signaling rate in configure message (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: pci: add support for the Intel Nova Lake -H (Desnes Nunes) [RHEL-147800]
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Desnes Nunes) [RHEL-147800]
  - usb: xhci: Prevent interrupt storm on host controller error (HCE) (Desnes Nunes) [RHEL-147800] {CVE-2026-43488}
  - usb: xhci: Fix memory leak in xhci_disable_slot() (Desnes Nunes) [RHEL-147800] {CVE-2026-43432}
  - usb: class: cdc-wdm: fix reordering issue in read code path (Desnes Nunes) [RHEL-147800] {CVE-2026-43427}
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Desnes Nunes) [RHEL-147800]
  - usb: core: new quirk to handle devices with zero configurations (Desnes Nunes) [RHEL-147800]
  - usb: misc: uss720: properly clean up reference in uss720_probe() (Desnes Nunes) [RHEL-147800]
  - USB: core: Limit the length of unkillable synchronous timeouts (Desnes Nunes) [RHEL-147800] {CVE-2026-43428}
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Desnes Nunes) [RHEL-147800] {CVE-2026-43429}
  - USB: usbcore: Introduce usb_bulk_msg_killable() (Desnes Nunes) [RHEL-147800]
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails (Desnes Nunes) [RHEL-147800]
  - thunderbolt: Fix property read in nhi_wake_supported() (Desnes Nunes) [RHEL-147800]
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size (Desnes Nunes) [RHEL-147800]
  - usbnet: limit max_mtu based on device's hard_mtu (Desnes Nunes) [RHEL-147800]
  - net: usb: r8152: add TRENDnet TUC-ET2G (Desnes Nunes) [RHEL-147800]
  - usb: image: mdc800: kill download URB on timeout (Desnes Nunes) [RHEL-147800] {CVE-2026-43425}
  - usb: mdc800: handle signal and read racing (Desnes Nunes) [RHEL-147800]
  - USB: add QUIRK_NO_BOS for video capture several devices (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: Add Thunderbolt alternate mode support (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: parametrize PORTSC1 register offset (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: parametrize HSIC PTS value (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: return error value from utmi_wait_register (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: cosmetic fixes (Desnes Nunes) [RHEL-147800]
  - usb: dwc2: fix resume failure if dr_mode is host (Desnes Nunes) [RHEL-147800]
  - usb: cdns3: fix role switching during resume (Desnes Nunes) [RHEL-147800] {CVE-2026-45911}
  - usb: dwc3: gadget: Move vbus draw to workqueue context (Desnes Nunes) [RHEL-147800] {CVE-2026-43170}
  - phy: tegra: xusb: Remove unused powered_on variable (Desnes Nunes) [RHEL-147800]
  - net: usb: introduce usbnet_mii_ioctl helper function (Desnes Nunes) [RHEL-147800]
  - net: usb: remove unnecessary get_drvinfo code and driver versions (Desnes Nunes) [RHEL-147800]
  - net: usb: replace unnecessary get_link functions with usbnet_get_link (Desnes Nunes) [RHEL-147800]
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock (Desnes Nunes) [RHEL-147800] {CVE-2025-40120}
  - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (Desnes Nunes) [RHEL-147800] {CVE-2025-38736}
  - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (Desnes Nunes) [RHEL-147800] {CVE-2025-38725}
  - usbnet: asix AX88772: leave the carrier control to phylink (Desnes Nunes) [RHEL-147800]
  - docs: fix 're-use' -> 'reuse' in documentation (Desnes Nunes) [RHEL-147800]
  - thermal/qcom/lmh: Replace IRQF_ONESHOT with IRQF_NO_THREAD (Desnes Nunes) [RHEL-147800]
  - char: tpm: cr50: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147800]
  - usb: typec: fusb302: Remove IRQF_ONESHOT (Desnes Nunes) [RHEL-147800]
  - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). (Desnes Nunes) [RHEL-147800]
  - USB: serial: option: add Telit FN920C04 RNDIS compositions (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Log dwc3 address in traces (Desnes Nunes) [RHEL-147800]
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: add HSIC support (Desnes Nunes) [RHEL-147800]
  - usb: phy: tegra: use phy type directly (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: Support mode selection to activate altmodes (Desnes Nunes) [RHEL-147800]
  - usb: typec: Introduce mode_selection bit (Desnes Nunes) [RHEL-147800]
  - usb: typec: Implement mode selection (Desnes Nunes) [RHEL-147800]
  - usb: typec: Expose alternate mode priority via sysfs (Desnes Nunes) [RHEL-147800]
  - usb: typec: Add mode_control field to port property (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to device property API (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to dev_err_probe() (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Convert to devm_clk_get_optional() (Desnes Nunes) [RHEL-147800]
  - usb: phy: generic: Always use dev in usb_phy_generic_probe() (Desnes Nunes) [RHEL-147800]
  - usbip: Reduce CONNRESET message noise in dmesg from stub (Desnes Nunes) [RHEL-147800]
  - tools: usb: usbip: remove dead-link from README (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting manufacturer string through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting product string through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: allow setting device serial number through sysfs (Desnes Nunes) [RHEL-147800]
  - xhci: dbc: prepare to expose strings through sysfs (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: renesas,usb2-phy: Document mux-states property (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: renesas,usb2-phy: Document USB VBUS regulator (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: enable RX Termination override (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: set platform driver data (Desnes Nunes) [RHEL-147800] {CVE-2026-43259}
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (Desnes Nunes) [RHEL-147800]
  - net: thunderbolt: Allow reading link settings (Desnes Nunes) [RHEL-147800]
  - bonding: 3ad: Add support for SPEED_80000 (Desnes Nunes) [RHEL-147800]
  - net: thunderbolt: Allow changing MAC address of the device (Desnes Nunes) [RHEL-147800]
  - usb: misc: onboard_dev: Add WCH CH334 USB2.0 Hub (1a86:8091) (Desnes Nunes) [RHEL-147800]
  - dt-bindings: usb: Add binding for WCH CH334/CH335 hub controller (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Add dwc pointer to dwc3_readl/writel (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: Remove of dep->regs (Desnes Nunes) [RHEL-147800]
  - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (Desnes Nunes) [RHEL-147800] {CVE-2026-43250}
  - usb: chipidea: ci_hdrc_imx: use "wakeup" suffix for wakeup interrupt name (Desnes Nunes) [RHEL-147800]
  - USB: HCD: remove logic about which hcd is loaded (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: disable auto suspend for host role (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: rename dwc3 to dwc3_pdev in struct dwc3_imx8mp (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: imx8mp: fix device leak at unbind (Desnes Nunes) [RHEL-147800]
  - usb: dwc3: drd: extend dwc3_pre_set_role() to extcon and otg usecase (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-combo: Add polarity inversion support for SAR2130P (Desnes Nunes) [RHEL-147800]
  - USB: core: Discard pm_runtime_put() return value (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: drop an unused Kconfig symbol (Desnes Nunes) [RHEL-147800]
  - USB: host: drop unneeded dependency on OF_GPIO (Desnes Nunes) [RHEL-147800]
  - usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver (Desnes Nunes) [RHEL-147800]
  - USB: typec: tcpm: Fix a typo (Desnes Nunes) [RHEL-147800]
  - thunderbolt: Log path activation failures without WARN backtraces (Desnes Nunes) [RHEL-147800]
  - phy: core: Simplify with scoped for each OF child loop (Desnes Nunes) [RHEL-147800]
  - phy: core: Reinstate pm_runtime_enabled() check in phy_pm_runtime_put() (Desnes Nunes) [RHEL-147800]
  - docs: admin-guide: thunderbolt: Replace ifconfig with ip (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-combo: Add DP offsets and settings for Glymur platforms (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-combo: Update QMP PHY with Glymur settings (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: Update the QMP clamp register for V6 (Desnes Nunes) [RHEL-147800]
  - phy: qualcomm: qmp-usb: Add support for Glymur USB UNI PHY (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: qcom,qmp-usb: Add Glymur USB UNI PHY compatible (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp-phy: Add Glymur compatible (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add QCS615 USB/DP PHY config and DP mode support (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp: Add DP v2 PHY register definitions (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add USB/DP exclude handling (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add DP PHY ops for USB/DP switchable Type-C PHYs (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add TCSR parsing and PHY mode setting (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Move USB-only init to usb_power_on (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: add DP link and vco_div clocks for DP PHY (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Move reset config into PHY cfg (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add regulator init_load support (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Add DP-related fields for USB/DP switchable PHY (Desnes Nunes) [RHEL-147800]
  - phy: qcom: qmp-usbc: Rename USB-specific ops to prepare for DP support (Desnes Nunes) [RHEL-147800]
  - dt-bindings: phy: Add QMP USB3+DP PHY for QCS615 (Desnes Nunes) [RHEL-147800]
  - phy: fsl-imx8mq-usb: change ssc_range value for i.MX8MQ (Desnes Nunes) [RHEL-147800]
  - phy: core: Discard pm_runtime_put() return values (Desnes Nunes) [RHEL-147800]
  - usb: gadget: Constify struct configfs_item_operations and configfs_group_operations (Desnes Nunes) [RHEL-147800]
  - configfs: Constify ct_item_ops in struct config_item_type (Desnes Nunes) [RHEL-147800]
  - configfs: Constify ct_group_ops in struct config_item_type (Desnes Nunes) [RHEL-147800]
  - usb: linux/usb.h: Correct the description of the usb_device_driver member (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (Desnes Nunes) [RHEL-147800]
  - usb: typec: ucsi: psy: Fix ucsi_psy_get_current_now in non-PD cases (Desnes Nunes) [RHEL-147800]
  - dt-bindings: usb: ehci/ohci: Allow "dma-coherent" (Desnes Nunes) [RHEL-147800]
  - usb: typec: Export typec bus and typec altmode device type (Desnes Nunes) [RHEL-147800]
  - usb: typec: Set the bus also for the port and plug altmodes (Desnes Nunes) [RHEL-147800]
  - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (Jaroslav Kysela) [RHEL-180892]
  - ACPI: bus: Fix MFD child automatic modprobe issue (Mark Langsdorf) [RHEL-173575]
  - ACPI: video: Switch over to auxiliary bus type (Mark Langsdorf) [RHEL-173575]
  - ACPI: video: Convert the driver to a platform one (Mark Langsdorf) [RHEL-173575]
  - iommupt: Fixup build warning by using BIT_ULL() for RISCVPT_NC/IO (Jennifer Berringer) [RHEL-174808]
  - iommupt: Encode IOMMU_MMIO/IOMMU_CACHE via RISC-V Svpbmt bits (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Advertise Svpbmt support to generic page table (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add ACPI support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Remove overflows on the invalidation path (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Fix signedness bug (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Stop polling when CQCSR reports an error (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Allow RISC_VIOMMU to COMPILE_TEST (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add missing GENERIC_MSI_IRQ (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Enable SVNAPOT support for contiguous ptes (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Use the generic iommu page table (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Disable SADE (Jennifer Berringer) [RHEL-174808]
  - iommupt: Add the RISC-V page table format (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Skip IRQ count check when using MSI interrupts (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add IOTINVAL after updating DDT/PDT entries (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Simplify maximum determination in riscv_iommu_init_check() (Jennifer Berringer) [RHEL-174808]
  - iommu: make inclusion of riscv directory conditional (Jennifer Berringer) [RHEL-174808]
  - iommu: Pass in old domain to attach_dev callback functions (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: prevent NULL deref in iova_to_phys (Jennifer Berringer) [RHEL-174808] {CVE-2025-39699}
  - iommu: Remove ops.pgsize_bitmap from drivers that don't use it (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Update to use iommu_alloc_pages_node_lg2() (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Convert to use struct iommu_pages_list (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove iommu_free_page() (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove iommu_alloc_page_node() (Jennifer Berringer) [RHEL-174808]
  - iommu/pages: Remove the order argument to iommu_free_pages() (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Fixup compile warning (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add shutdown function for iommu driver (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Empty iommu queue before enabling it (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add support for platform msi (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Paging domain support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Command and fault queue support (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Device directory management. (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Enable IOMMU registration and device probe. (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add RISC-V IOMMU PCIe device driver (Jennifer Berringer) [RHEL-174808]
  - iommu/riscv: Add RISC-V IOMMU platform device driver (Jennifer Berringer) [RHEL-174808]
  - redhat/configs: Enable RISC-V IOMMU (Jennifer Berringer) [RHEL-174808]
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Xin Long) [RHEL-152730]
  - sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long) [RHEL-152730]
  - sctp: fix missing encap_port propagation for GSO fragments (Xin Long) [RHEL-152730]
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [RHEL-152730]
  - scsi: megaraid_sas: Fix NULL pointer dereference on firmware duplicate completion (Chandrakanth Patil) [RHEL-141214]
  - scsi: megaraid_sas: Protect more code with instance->reset_mutex (Chandrakanth Patil) [RHEL-141214]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-253.el10]
changelog:
  - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
  - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214083] {CVE-2026-64530}
  - x86/fpu: Ensure XFD state on signal delivery (Steve Best) [RHEL-213537]
  - platform/x86: intel-hid: Protect ACPI notify handler against recursion (Steve Best) [RHEL-213294]
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Dennis Chen) [RHEL-212108]
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189556] {CVE-2025-68211}
  - i2c: i801: fix hardware state machine corruption in error path (Steve Best) [RHEL-212367]
  - gitlab-ci: enable riscv64 builds for c10s and rhel10 (Michael Krausch-Hofmann)
  - pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: make devm allocations safer and clearer in mtk_eint_do_init() (Jiri Benc) [RHEL-191293]
  - pinctrl: Use dev_fwnode() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: paris: use new GPIO line value setter callbacks (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: paris: don't double-check the GPIO number (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: common-v1: Fix error checking in mtk_eint_init() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Fix new design debounce issue (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: common-v1: Fix EINT breakage on older controllers (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Fix the invalid conditions (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Add EINT support for multiple addresses (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: Drop mtk_pinconf_bias_set_pd() (Jiri Benc) [RHEL-191293]
  - pinctrl: mediatek: add support for MTK_PULL_PD_TYPE (Jiri Benc) [RHEL-191293]
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Steve Best) [RHEL-211103]
  - cpufreq: intel_pstate: Sync policy->cur during CPU offline (Steve Best) [RHEL-210859]
  - platform/x86/amd/hsmp: Clamp ioctl/send_message indices (Spectre v1) (Steve Best) [RHEL-208745]
  - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193944]
  - KVM: s390: Fix S390_USER_OPEREXEC enablement without STFLE 74 (Christoph Schlameuss) [RHEL-158929]
  - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189666] {CVE-2026-23199}
  - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189666] {CVE-2026-23199}
  - i2c: tegra: Fix NOIRQ suspend/resume (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: Update Tegra410 I2C timing parameters (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: Disable fair arbitration for non-MCTP buses (Charles Mirabile) [RHEL-174252]
  - i2c: tegra: use dmaengine_get_dma_device() for DMA buffer allocation (Charles Mirabile) [RHEL-174252]
  - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187413] {CVE-2026-46303}
  - intel_idle: Add Panther Lake C-states table (Steve Best) [RHEL-185572]
  - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-183882]
  - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183882]
  - tools/power/x86/intel-speed-select: Fix output when running on unsupported CLX platforms (Steve Best) [RHEL-184884]
  - tools/power/x86/intel-speed-select: Fix some program return value (Steve Best) [RHEL-184884]
  - tools/power/x86/intel-speed-select: Fix cpu extended family ID decoding (Steve Best) [RHEL-184884]
  - platform/x86/intel/tpmi/plr: Prevent fault during unbind (Steve Best) [RHEL-182358]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (Karol Herbst) [RHEL-170737]
  - Revert "drm/i915: Use preempt_disable/enable_rt() where recommended" (Karol Herbst) [RHEL-170737]
  - Revert "drm/gem: fix build for mm_get_unmapped_area() call after backmerge" (Karol Herbst) [RHEL-170737]
  - Partiall revert "mm: update shmem_[kernel]_file_*() functions to use vma_flags_t" (Karol Herbst) [RHEL-170737]
  - drm: add 4th argument to vfs_parse_fs_string calls (Karol Herbst) [RHEL-170737]
  - redhat/configs: Add new configs from DRM 7.0 backport (Karol Herbst) [RHEL-170737]
  - Merge DRM changes from upstream v6.19..v7.0 (Karol Herbst) [RHEL-170737]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-254.el10]
changelog:
  - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212683]
  - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169468]
  - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169468]
  - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169468]
  - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172539] {CVE-2026-31692}
  - KVM: selftests: access_tracking_perf_test: bump number of NUMA nodes to 32 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rate-limit global clock updates on vCPU load (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix ERAPS RAP clear on INVPCID single-context invalidation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Swap the dst and src operand for MOVNTDQA (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Ensure gmem file sizes are multiple of host page size (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8 (Maxim Levitsky) [RHEL-151869]
  - Documentation: kvm: fix formatting of the quirks table (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: clarify leave_smm() return value (Maxim Levitsky) [RHEL-151869]
  - selftests: kvm: add a test that VMX validates controls on RSM (Maxim Levitsky) [RHEL-151869]
  - selftests: kvm: extract common functionality out of smm_test.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: check validity of VMCB controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: check validity of VMCS controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Fix a wrong MSR update in add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: synthesize CPUID bits only if CPU capability is set (Maxim Levitsky) [RHEL-151869]
  - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add x2APIC "features" to control EOI broadcast suppression (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Harden against unexpected adjustments to kvm_cpu_caps (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AVX10_VNNI_INT CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AVX10.2 CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise AMX CPUIDs in subleaf 0x1E.0x1 to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise MOVRS CPUID to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Maxim Levitsky) [RHEL-151869]
  - KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test READ=>WRITE dirty logging behavior for shadow MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Print out "bad" offsets+value on VMCS config mismatch (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Remove explicit filtering of GUEST_INTR_STATUS from shadow VMCS fields (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Disallow access to vmcs12 fields that aren't supported by "hardware" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add a wrapper around ROL16() to get a vmcs12 from a field encoding (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Setup VMX MSRs on loading CPU during nested_vmx_hardware_setup() (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: GUP source pages prior to populating guest memory (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Document alignment requirements for KVM_TDX_INIT_MEM_REGION (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Document/enforce page-alignment for KVM_SEV_SNP_LAUNCH_UPDATE (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove preparation tracking (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove partial hugepage handling from kvm_gmem_populate() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a selftests for nested VMLOAD/VMSAVE (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Don't register posted interrupt wakeup handler if alloc_kvm_area() fails (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Drop redundant/wrong comment in nested_vmcb02_prepare_save() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Slightly simplify memstress_setup_nested() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Remove declaration of nested_mark_vmcs12_pages_dirty() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Assert that Hyper-V's HV_SVM_EXITCODE_ENL == SVM_EXIT_SW (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Harden exit_code against being used in Spectre-like attacks (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Limit incorrect check on SVM_EXIT_ERR to running as a VM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Treat exit_code as an unsigned 64-bit value through all of KVM (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Filter out 64-bit exit codes when invoking exit handlers on bare metal (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check for an unexpected VM-Exit after RETPOLINE "fast" handling (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Open code handling of unexpected exits in svm_invoke_exit_handler() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add a helper to detect VMRUN failures (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: align the code with kvm_x86_call() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Tag sev_supported_vmsa_features as read-only after init (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Drop the module param to control SEV-ES DebugSwap (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Update APICv ISR (a.k.a. SVI) as part of kvm_apic_update_apicv() (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to set virtual APICv mode on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update APIC page on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to refresh APICv controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update SVI on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update TPR threshold on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Switch to vmcs01 to update PML controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a test to verify APICv updates (while L2 is active) (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Fix a missing kunmap_local() in sev_gmem_post_populate() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Hide KVM_IRQCHIP_KERNEL behind CONFIG_KVM_IOAPIC=y (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Bury ioapic.h definitions behind CONFIG_KVM_IOAPIC (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fold "struct dest_map" into "struct rtc_status" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a wrapper to handle common case of IRQ delivery without dest_map (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop MAX_NR_RESERVED_IOAPIC_PINS, use KVM_MAX_IRQ_ROUTES directly (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop guest-triggerable ASSERT()s on I/O APIC access alignment (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop ASSERT() on I/O APIC EOIs being only for LEVEL_to WARN_ON_ONCE (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop guest/user-triggerable asserts on IRR/ISR vectors (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop ASSERT()s on APIC/vCPU being non-NULL (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_set_nested_state_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use TEST_ASSERT_EQ() in test_vmx_nested_state() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Allow KVM_SET_NESTED_STATE to clear GIF when SVME==0 (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't set GIF when clearing EFER.SVME (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Virtualize and advertise support for ERAPS (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't allow L1 intercepts for instructions not advertised (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add support for expedited writes to the fast MMIO bus (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Rename "fault_address" to "gpa" in npf_interception() (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't read guest CR3 when doing async pf while the MMU is direct (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename vm_get_page_table_entry() to vm_get_pte() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend memstress to run on nested SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_dirty_log_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Set the user bit on nested NPT PTEs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for nested NPTs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Allow kvm_cpu_has_ept() to be called on AMD CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move TDP mapping functions outside of vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Reuse virt mapping functions for nested EPTs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a stage-2 MMU instance to kvm_vm (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop passing VMX metadata to TDP mapping functions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a TDP MMU to share EPT page tables between vCPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move PTE bitmasks to kvm_mmu (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a "struct kvm_mmu_arch arch" member to kvm_mmu (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Plumb "struct kvm_mmu" into x86's MMU APIs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add "struct kvm_mmu" to track a given MMU instance (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop setting A/D bits when creating EPT PTEs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Kill eptPageTablePointer (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename nested TDP mapping functions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop passing a memslot to nested_map_memslot() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Make __vm_get_page_table_entry() static (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Fix sign extension bug in get_desc64_base() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Mark APIC access page dirty when syncing vmcs12 pages (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Move nested_mark_vmcs12_pages_dirty() to vmx.c, and rename (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Precisely mark vAPIC and PID maps dirty when delivering nested PI (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Mark vmcs12 pages as dirty if and only if they're mapped (Maxim Levitsky) [RHEL-151869]
  - KVM: Use vCPU specific memslots in __kvm_vcpu_map() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add mediated PMU support for CPUs without "save perf global ctrl" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Initialize vmcs01.VM_EXIT_MSR_STORE_ADDR with list address (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Dedup code for adding MSR to VMCS's auto list (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Compartmentalize adding MSRs to host vs. guest auto-load list (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set MSR index auto-load entry if and only if entry is "new" (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Bug the VM if either MSR auto-load list is full (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Drop unused @entry_only param from add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Dedup code for removing MSR from VMCS's auto-load list (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Don't update msr_autostore count when saving TSC for vmcs12 (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Drop intermediate "guest" field from msr_autostore (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Elide WRMSRs when loading guest PMCs if values already match (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Expose enable_mediated_pmu parameter to user space (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add macros to simplify nested MSR interception setting (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Handle emulated instruction for mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disallow emulation in the fastpath if mediated PMCs are active (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Load/put mediated PMU context when entering/exiting guest (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Always stuff GuestOnly=1,HostOnly=0 for mediated PMCs on AMD (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Reprogram mediated PMU event selectors on event filter updates (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Introduce eventsel_hw to prepare for pmu event filtering (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Bypass perf checks when emulating mediated PMU counter accesses (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disable interception of select PMU MSRs for mediated vPMUs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Load/save GLOBAL_CTRL via entry/exit fields for mediated PMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Disable RDPMC interception for compatible mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Register PMI handler for mediated vPMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Implement AMD mediated PMU requirements (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Implement Intel mediated PMU requirements and constraints (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Start stubbing in mediated PMU support (Maxim Levitsky) [RHEL-151869]
  - KVM: Add a simplified wrapper for registering perf callbacks (Maxim Levitsky) [RHEL-151869]
  - perf: Use EXPORT_SYMBOL_FOR_KVM() for the mediated APIs (Maxim Levitsky) [RHEL-151869]
  - perf: Clean up mediated vPMU accounting (Maxim Levitsky) [RHEL-151869]
  - perf/x86/amd: Support PERF_PMU_CAP_MEDIATED_VPMU for AMD host (Maxim Levitsky) [RHEL-151869]
  - perf/x86/intel: Support PERF_PMU_CAP_MEDIATED_VPMU (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Plumb mediated PMU capability from x86_pmu to x86_pmu_cap (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Do not set bit width for unavailable counters (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Add APIs to switch to/from mediated PMI vector (for KVM) (Maxim Levitsky) [RHEL-151869]
  - perf/x86/core: Register a new vector for handling mediated guest PMIs (Maxim Levitsky) [RHEL-151869]
  - perf: Add APIs to load/put guest mediated PMU context (Maxim Levitsky) [RHEL-151869]
  - perf: Add a EVENT_GUEST flag (Maxim Levitsky) [RHEL-151869]
  - perf: Clean up perf ctx time (Maxim Levitsky) [RHEL-151869]
  - perf: Add APIs to create/release mediated guest vPMUs (Maxim Levitsky) [RHEL-151869]
  - perf: Move security_perf_event_free() call to __free_event() (Maxim Levitsky) [RHEL-151869]
  - perf: Add generic exclude_guest support (Maxim Levitsky) [RHEL-151869]
  - perf: Skip pmu_ctx based on event_type (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Always reflect SGX EPCM #PFs back into the guest (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test TPR / CR8 sync and interrupt masking (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disallow setting CPUID and/or feature MSRs if L2 is active (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Assert that non-MSI doesn't have bypass vCPU when deleting producer (Maxim Levitsky) [RHEL-151869]
  - KVM: Don't clobber irqfd routing type when deassigning irqfd (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check vCPU ID against max x2AVIC ID if and only if x2AVIC is enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Update SVI during runtime APICv activation (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Maxim Levitsky) [RHEL-151869]
  - KVM: Harden and prepare for modifying existing guest_memfd memslots (Maxim Levitsky) [RHEL-151869]
  - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a CPUID testcase for KVM_SET_CPUID2 with runtime updates (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Make sure vm->vpages_mapped is always up-to-date (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop using __virt_pg_map() directly in tests (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add a VMX test for LA57 nested state (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Change VM_MODE_PXXV48_4K to VM_MODE_PXXVYY_4K (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a loop to walk guest page tables (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use a loop to create guest page tables (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Remove the unused argument to prepare_eptp() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Stop hardcoding PAGE_SIZE in x86 selftests (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_tsc_adjust_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend nested_invalid_cr3_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Move nested invalid CR3 check to its own test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_nested_tsc_scaling_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend vmx_close_while_nested_test to cover SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Remove unused declaration kvm_mmu_may_ignore_guest_pat() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable support for emulating AVX MOV instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add emulator support for decoding VEX prefixes (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Refactor REX prefix handling in instruction emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add AVX support to the emulator's register fetch and writeback (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add x86_emulate_ops.get_xcr() callback (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Share emulator's common register decoding code (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move op_prefix to struct x86_emulate_ctxt (from x86_decode_insn()) (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Improve formatting of the emulator's flags table (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move Src2Shift up one bit (use bits 36:32 for Src2 in the emulator) (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add support for emulating MOVNTDQA (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a helper to dedup loading guest/host XCR0 and XSS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest/host PKRU outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest/host XCR0 and XSS outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Handle #MCs on VM-Enter/TD-Enter outside of the fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Handle #MCs in guest outside of fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unify L1TF flushing under per-CPU variable (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Disable L1TF L1 data cache flush if CONFIG_CPU_MITIGATIONS=n (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Bundle all L1 data cache flush mitigation code together (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: KVM: Move VM_CLEAR_CPU_BUFFERS into SVM as SVM_CLEAR_CPU_BUFFERS (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Handle MMIO Stale Data in VM-Enter assembly via ALTERNATIVES_2 (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Use an x86 feature to track the MMIO Stale Data mitigation (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Decouple ALTERNATIVE usage from VERW macro definition (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Use VM_CLEAR_CPU_BUFFERS in VMX as well (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Use on-stack copy of @flags in __vmx_vcpu_run() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Allocate/free user_return_msrs at kvm.ko (un)loading time (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: remove comment about ntp correction sync for (Maxim Levitsky) [RHEL-151869]
  - Revert "x86: kvm: rate-limit global clock updates" (Maxim Levitsky) [RHEL-151869]
  - Revert "x86: kvm: introduce periodic global clock updates" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Grab lapic_timer in a local variable to cleanup periodic code (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use "checked" versions of get_user() and put_user() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add known supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Publish supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - crypto: ccp - Add an API to return the supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Consolidate the SEV policy bits in a single header file (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Document a virtualization gap for GIF on AMD CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Maxim Levitsky) [RHEL-151869]
  - x86/bugs: Drop unnecessary export of "x86_spec_ctrl_base" (Maxim Levitsky) [RHEL-151869]
  - x86/mtrr: Drop unnecessary export of "mtrr_state" (Maxim Levitsky) [RHEL-151869]
  - x86/mm: Drop unnecessary export of "ptdump_walk_pgd_level_debugfs" (Maxim Levitsky) [RHEL-151869]
  - x86: Restrict KVM-induced symbol exports to KVM modules where obvious/possible (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Make loaded_vmcs_clear() static in vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't disable IRQs when unregistering user-return notifier (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Leave user-return notifier registered on reboot/shutdown (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: WARN if user-return MSR notifier is registered on exit (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Explicitly set user-return MSRs that *may* be clobbered by the TDX-Module (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Ensure SPEC_CTRL[63:32] is context switched between guest and host (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Ensure guest's SPEC_CTRL[63:32] is loaded on VM-Enter (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Remove redundant cases in nested_svm_intercept() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use struct_size to simplify tdx_get_capabilities() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Check size of user's kvm_tdx_capabilities array before allocating (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fix sparse warnings from using 0 for NULL (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Remove __user annotation from kernel pointer (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Take MMU lock around tdh_vp_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fix list_add corruption during vcpu_load() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Bug the VM if extending the initial measurement fails (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Guard VM state transitions with "all" the locks (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Don't copy "cmd" back to userspace for KVM_TDX_CAPABILITIES (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use guard() to acquire kvm->lock in tdx_vm_ioctl() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Convert INIT_MEM_REGION and INIT_VCPU to "unlocked" vCPU ioctl (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Add tdx_get_cmd() helper to get and validate sub-ioctl command (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Add macro to retry SEAMCALLs when forcing vCPUs out of guest (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Assert that mmu_lock is held for write when removing S-EPT entries (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Derive error argument names from the local variable names (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Combine KVM_BUG_ON + pr_tdx_error() into TDX_BUG_ON() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_sept_zap_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: ADD pages to the TD image while populating mirror EPT entries (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_mem_page_record_premap_cnt() into its sole caller (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Use atomic64_dec_return() instead of a poor equivalent (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Avoid a double-KVM_BUG_ON() in tdx_sept_zap_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: WARN if mirror SPTE doesn't have full RWX when creating S-EPT mapping (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Drop the return code from kvm_x86_ops.remove_external_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Fold tdx_sept_drop_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Return -EIO, not -EINVAL, on a KVM_BUG_ON() condition (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Drop superfluous page pinning in S-EPT management (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Rename kvm_tdp_map_page() to kvm_tdp_page_prefault() (Maxim Levitsky) [RHEL-151869]
  - Revert "KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU" (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: WARN if KVM attempts to map into an invalid TDP MMU root (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Add dedicated API to map guest_memfd pfn into TDP MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Drop PROVE_MMU=y sanity check on to-be-populated mappings (Maxim Levitsky) [RHEL-151869]
  - KVM: Rename kvm_arch_vcpu_async_ioctl() to kvm_arch_vcpu_unlocked_ioctl() (Maxim Levitsky) [RHEL-151869]
  - KVM: Make support for kvm_arch_vcpu_async_ioctl() mandatory (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Move the misplaced export of kvm_zap_gfn_range() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a helper to dedup reporting of unhandled VM-Exits (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Rename "guest_paddr" variables to "gpa" (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use "gpa" and "gva" for local variable names in pre-fault test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Forcefully override ARCH from x86_64 to x86 (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Don't fall over in mmu_stress_test when only one CPU is present (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Define a CLASS to get+put guest_memfd file from a memslot (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add gmem_inode.flags field instead of using i_private (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add guest_memfd tests for mmap and NUMA policy support (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add helpers to probe for NUMA support, and multi-node systems (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Use proper uAPI headers to pick up mempolicy.h definitions (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add additional equivalents to libnuma APIs in KVM's numaif.h (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Report stacktraces SIGBUS, SIGSEGV, SIGILL, and SIGFPE by default (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Define wrappers for common syscalls to assert success (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Enforce NUMA mempolicy using shared policy (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add slab-allocated inode cache (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Use guest mem inodes instead of anonymous inodes (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Add macro to iterate over gmem_files for a mapping/inode (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Rename "struct kvm_gmem" to "struct gmem_file" (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Drop a superfluous local var in kvm_gmem_fault_user_mapping() (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: use folio_nr_pages() instead of shift operation (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: remove redundant gmem variable initialization (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: move kvm_gmem_get_index() and use in kvm_gmem_prepare_folio() (Maxim Levitsky) [RHEL-151869]
  - mm/mempolicy: Export memory policy symbols (Maxim Levitsky) [RHEL-151869]
  - mm/filemap: Extend __filemap_get_folio() to support NUMA memory policies (Maxim Levitsky) [RHEL-151869]
  - mm/filemap: Add NUMA mempolicy support to filemap_alloc_folio() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add AVIC support for 4k vCPUs in x2AVIC mode (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add X86_FEATURE_X2AVIC_EXT (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move AVIC Physical ID table allocation to vcpu_precreate() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Expand AVIC_PHYSICAL_MAX_INDEX_MASK to be a 12-bit field (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Replace hard-coded value 0x1FF with the corresponding macro (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Add a helper to look up the max physical ID for AVIC (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add an off-by-default module param to WARN on missed consistency checks (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Remove support for "early" consistency checks via hardware (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Stuff vmcs02.TSC_MULTIPLIER early on for nested early checks (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency check for TSC_MULTIPLIER=0 (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency check for TPR_THRESHOLD[31:4]!=0 without VID (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Use kvm_mmu_page role to construct EPTP, not current vCPU state (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Move "dummy root" helpers to spte.h (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Hardcode dummy EPTP used for early nested consistency checks (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Hoist construct_eptp() "up" in vmx.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Disallow EFER.LMSLE when not supported by hardware (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise EferLmsleUnsupported to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: Fix VM exit code for full dirty ring in API documentation (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
  - KVM: TDX: Replace kmalloc + copy_from_user with memdup_user in tdx_td_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: Explicitly allocate/setup irqfd cleanup as per-CPU workqueue (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Use vcpu instead of vmx->vcpu when vcpu is available (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Remove stale vmx_set_dr6() declaration (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Skip MMIO SPTE invalidation if enable_mmio_caching=0 (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Make X86_FEATURE leaf 17 Linux-specific (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Fix redundant updates of LBR MSR intercepts (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync KVM's vmx.h with the kernel to pick SEAMCALL exit reason (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Fix and simplify LBR virtualization handling with nested (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Fix check for valid GVA on an EPT violation (Maxim Levitsky) [RHEL-151869]
  - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: switch to raw spinlock for svm->ir_list_lock (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Make avic_ga_log_notifier() local to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Unregister KVM's GALog notifier on kvm-amd.ko exit (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Initialize per-CPU svm_data at the end of hardware setup (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Call out MSR_IA32_S_CET is not handled by XSAVES (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Harden KVM against imbalanced load/put of guest FPU state (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unload "FPU" state on INIT if and only if its currently in-use (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Inject #UD if guest tries to execute SEAMCALL or TDCALL (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync KVM's vmx.h header with the kernel sources to handle new exit reasons (Maxim Levitsky) [RHEL-151869]
  - tools headers UAPI: Sync x86's asm/kvm.h with the kernel sources (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Don't try to get perf capabilities for hybrid CPUs (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Test prefault memory during concurrent memslot removal (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop pointless exports of kvm_arch_xxx() hooks (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Move kvm_intr_is_single_vcpu() to lapic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
  - KVM: s390/vfio-ap: Use kvm_is_gpa_in_memslot() instead of open coded equivalent (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Make CR4.CET a guest owned bit (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Verify MSRs are (not) in save/restore list when (un)supported (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add coverage for KVM-defined registers in MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add KVM_{G,S}ET_ONE_REG coverage to MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Extend MSRs test to validate vCPUs without supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for MSR_IA32_{S,U}_CET to MSRs test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add an MSR test to exercise guest/host and read/write (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Enable shadow stack virtualization for SVM (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Synchronize MSR_IA32_XSS from the GHCB when it's valid (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Pass through shadow stack MSRs as appropriate (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Update dump_vmcb with shadow stack save area additions (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Save/load CET Shadow Stack state to/from vmcb12/vmcb02 (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Emulate reads and writes to shadow stack MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Advertise new VM-Entry/Exit control bits for CET state (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency checks for CET states (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Prepare for enabling CET support for nested guest (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Virtualize NO_HW_ERROR_CODE_CC for L1 event injection to L2 (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Configure nested capabilities after CPU capabilities (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable CET virtualization for VMX and advertise to userspace (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disable support for IBT and SHSTK if allow_smaller_maxphyaddr is true (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Initialize allow_smaller_maxphyaddr earlier in setup (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Disable support for Shadow Stacks if TDP is disabled (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add XSS support for CET_KERNEL and CET_USER (Maxim Levitsky) [RHEL-151869]
  - KVM: nVMX: Always forward XSAVES/XRSTORS exits from L2 to L1 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Allow setting CR4.CET if IBT or SHSTK is supported (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Pretty print PK, SS, and SGX flags in MMU tracepoints (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: WARN on attempt to check permissions for Shadow Stack #PF (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Emulate SSP[63:32]!=0 #GP(0) for FAR JMP to 32-bit mode (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't emulate task switches when IBT or SHSTK is enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Don't emulate instructions affected by CET features (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set host constant supervisor states to VMCS fields (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Set up interception for CET MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Save and reload SSP to/from SMRAM (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Emulate read and write to CET MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Enable guest SSP read/write interface with new uAPIs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Introduce CET VMCS fields and control bits (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Report KVM supported CET MSRs as to-be-saved (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add fault checks for guest CR4.CET setting (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Load guest FPU state when access XSAVE-managed MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Initialize kvm_caps.supported_xss (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Refresh CPUID on write to guest MSR_IA32_XSS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Check XSS validity against guest CPUIDs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Report XSS as to-be-saved if there are supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce KVM_{G,S}ET_ONE_REG uAPIs support (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move global "avic" variable to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Don't advise the user to do force_avic=y (when x2AVIC is detected) (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Always print "AVIC enabled" separately, even when force enabled (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Update "APICv in x2APIC without x2AVIC" in avic.c, not svm.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Make svm_x86_ops globally visible, clean up on-HyperV usage (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Validate XCR0 provided by guest in GHCB (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Read save fields from GHCB exactly once (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Rename kvm_ghcb_get_sw_exit_code() to kvm_get_cached_sw_exit_code() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Restrict GLOBAL_{CTRL,STATUS}, fixed PMCs, and PEBS to PMU v2+ (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move initialization of valid PMCs bitmask to common x86 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Use BIT_ULL() instead of open coded equivalents (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add helpers to toggle/change a bit in VMCS execution controls (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use KVM_REQ_RECALC_INTERCEPTS to react to CPUID updates (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rework KVM_REQ_MSR_FILTER_CHANGED into a generic RECALC_INTERCEPTS (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move PMU_CAP_{FW_WRITES,LBR_FMT} into msr-index.h header (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename vmx_vmentry/vmexit_ctrl() helpers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Snapshot host (i.e. perf's) reported PMU capabilities (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Check pmu->version, not enable_pmu, when getting PMC MSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Setup canonical VMCS config prior to kvm_x86_vendor_init() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Add SEV-SNP CipherTextHiding support (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Introduce new min,max sev_es and sev_snp asid variables (Maxim Levitsky) [RHEL-151869]
  - KVM: nSVM: Replace kzalloc() + copy_from_user() with memdup_user() (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add support for DIV and IDIV in the fastops test (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Dedup the gnarly constraints of the fastops tests (more macros!) (Maxim Levitsky) [RHEL-151869]
  - KVM: selftests: Add coverage for 'b' (byte) sized fastops emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Enable Secure TSC for SNP guests (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Fold sev_es_vcpu_reset() into sev_vcpu_create() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Set RESET GHCB MSR value during sev_es_init_vmcb() (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Move init of SNP guest state into sev_init_vmcb() (Maxim Levitsky) [RHEL-151869]
  - KVM: SVM: Move SEV-ES VMSA allocation to a dedicated sev_vcpu_create() helper (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add SNP Secure TSC (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Enforce minimum GHCB version requirement for SEV-SNP guests (Maxim Levitsky) [RHEL-151869]
  - KVM: SEV: Drop GHCB_VERSION_DEFAULT and open code it (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Zero XSTATE components on INIT by iterating over supported features (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Manually clear MPX state only on INIT (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add kvm_msr_{read,write}() helpers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Use double-underscore read/write MSR helpers as appropriate (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename kvm_{g,s}et_msr()* to show that they emulate guest accesses (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Advertise support for the immediate form of MSR instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Support the immediate form of WRMSRNS in the VM-Exit fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add support for RDMSR/WRMSRNS w/ immediate on Intel (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename handle_fastpath_set_msr_irqoff() to handle_fastpath_wrmsr() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Rename local "ecx" variables to "msr" and "pmc" as appropriate (Maxim Levitsky) [RHEL-151869]
  - x86/cpufeatures: Add a CPU feature bit for MSR immediate form instructions (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add a fastpath handler for INVD (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Push acquisition of SRCU in fastpath into kvm_pmu_trigger_event() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Rename check_pmu_event_filter() to pmc_is_event_allowed() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Drop redundant check on PMC being locally enabled for emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Drop redundant check on PMC being globally enabled for emulation (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Open code pmc_event_is_allowed() in its callers (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Rename pmc_speculative_in_use() to pmc_is_locally_enabled() (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Calculate set of to-be-emulated PMCs at time of WRMSRs (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Add wrappers for counting emulated instructions/branches (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/pmu: Move kvm_init_pmu_capability() to pmu.c (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Fold WRMSR fastpath helpers into the main handler (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unconditionally grab data from EDX:EAX in WRMSR fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Acquire SRCU in WRMSR fastpath iff instruction needs to be skipped (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Unconditionally handle MSR_IA32_TSC_DEADLINE in fastpath exits (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Drop semi-arbitrary restrictions on IPI type in fastpath (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Only allow "fast" IPIs in fastpath WRMSR(X2APIC_ICR) handler (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Add kvm_icr_to_lapic_irq() helper to allow for fastpath IPIs (Maxim Levitsky) [RHEL-151869]
  - KVM: VMX: Add host MSR read/write helpers to consolidate preemption handling (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (Maxim Levitsky) [RHEL-151869]
  - KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Remove fastops (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Convert em_salc() to C (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_3WCL (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_1SRC2 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2CL (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2W (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2R (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_2 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Introduce EM_ASM_1 (Maxim Levitsky) [RHEL-151869]
  - KVM: x86: Implement test_cc() in C (Maxim Levitsky) [RHEL-151869]
  - module: Rename EXPORT_SYMBOL_GPL_FOR_MODULES to EXPORT_SYMBOL_FOR_MODULES (Maxim Levitsky) [RHEL-151869]
  - net: aquantia: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
  - net/mlx5e: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
  - udp: gso: Use single MSS length in UDP header for GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-255.el10]
changelog:
  - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-169756]
  - xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178329]
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180168] {CVE-2026-46116}
  - espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154898] {CVE-2026-23239}
  - pseries/lparcfg: Add resource group monitoring (Mamatha Inamdar) [RHEL-217019]
  - nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-54175]
  - nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-54175]
  - nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
  - nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-54175]
  - nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-54175]
  - nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-54175]
  - nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-54175]
  - nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
  - nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-54175]
  - ata: libata-pmp: add JMicron JMS562 quirk (Tomas Henzl) [RHEL-157217]
  - ata: libata-core: disable LPM on ADATA SU680 SSD (Tomas Henzl) [RHEL-157217]
  - ata: libata-core: Disable LPM on ST1000DM010-2EP102 (Tomas Henzl) [RHEL-157217]
  - ata: libata-core: Disable LPM on ST2000DM008-2FR102 (Tomas Henzl) [RHEL-157217]
  - ata: libata: Fix ata_exec_internal() (Tomas Henzl) [RHEL-157217]
  - ata: libata-eh: Do not retry reset if the device is gone (Tomas Henzl) [RHEL-157217]
  - ata: libata: avoid long timeouts on hot-unplugged SATA DAS (Tomas Henzl) [RHEL-157217]
  - ata: libata-eh: avoid unnecessary calls to ata_scsi_port_error_handler() (Tomas Henzl) [RHEL-157217]
  - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Tomas Henzl) [RHEL-157217]
  - ata: ahci: Do not read the per port area for unimplemented ports (Tomas Henzl) [RHEL-157217]
  - ata: ahci: fail probe if BAR too small for claimed ports (Tomas Henzl) [RHEL-157217]
  - scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-208594]
  - ksmbd: fix memory leak of xattr_stream_name in smb2_rename() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: zero the smb2_read alignment tail to avoid an infoleak (Paulo Alcantara) [RHEL-190706]
  - ksmbd: pin conn during async oplock break notification (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix integer overflow in set_file_allocation_info() (Paulo Alcantara) [RHEL-190706]
  - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-190706]
  - smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-190706]
  - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-190706]
  - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-190706]
  - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-190706]
  - smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-190706]
  - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-190706]
  - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-190706]
  - redhat/configs: enable CONFIG_CIFS_SMB_DIRECT (Paulo Alcantara) [RHEL-190706]
  - redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-190706]
  - scatterlist: Fix offset in folio calc in extract_xarray_to_sg() (Paulo Alcantara) [RHEL-190706]
  - iov_iter: Fix a memory leak in iov_iter_extract_user_pages() (Paulo Alcantara) [RHEL-190706]
  - iov_iter: Fix missing alloc fail check in iov_iter_extract_bvec_pages() (Paulo Alcantara) [RHEL-190706]
  - iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages() (Paulo Alcantara) [RHEL-190706]
  - cachefiles: Fix double fput (Paulo Alcantara) [RHEL-190706]
  - smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-190706]
  - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-190706]
  - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-190706]
  - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix busy dentry warning on unmount after DIO (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix atime clamp check in read completion (Paulo Alcantara) [RHEL-190706]
  - cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-190706]
  - smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-190706]
  - smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-190706]
  - smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-190706]
  - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix barriering when walking subrequest list (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix missing credit release on failure in cifs_issue_read() (Paulo Alcantara) [RHEL-190706]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
  - smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-190706]
  - smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix DIO write retry for filesystems without a ->prepare_write() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix folio state after ENOMEM whilst under writeback iteration (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix writeback error handling (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix writethrough to use collection offload (Paulo Alcantara) [RHEL-190706]
  - netfs: Replace wb_lock with a bit lock for asynchronicity (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix kdoc warning (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix netfs_create_write_req() to handle async cache object creation (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix decision whether to disallow write-streaming due to fscache use (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix app-instance durable supersede session UAF (Paulo Alcantara) [RHEL-190706]
  - ksmbd: snapshot previous oplock state before durable checks (Paulo Alcantara) [RHEL-190706]
  - ksmbd: close superseded durable handles through refcount handoff (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check (Paulo Alcantara) [RHEL-190706]
  - smb/server: do not require delete access for non-replacing links (Paulo Alcantara) [RHEL-190706]
  - ksmbd: don't hold ci->m_lock while waiting for a lease break ack (Paulo Alcantara) [RHEL-190706]
  - ksmbd: annotate oplock list traversals under m_lock (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix outstanding credit leak on abort and error paths (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix credit charge calculation for SMB2 QUERY_INFO (Paulo Alcantara) [RHEL-190706]
  - ksmbd: avoid zeroing the read buffer in smb2_read() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl (Paulo Alcantara) [RHEL-190706]
  - ksmbd: reject undersized DACLs before parsing ACEs (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr (Paulo Alcantara) [RHEL-190706]
  - ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr (Paulo Alcantara) [RHEL-190706]
  - cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-190706]
  - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-190706]
  - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-190706]
  - smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-190706]
  - smb/client: use %pe to print error pointer (Paulo Alcantara) [RHEL-190706]
  - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-190706]
  - smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix kernel-doc warnings in smb2_lease_break_noti() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix inconsistent indenting warnings (Paulo Alcantara) [RHEL-190706]
  - ksmbd: increase SMB3_DEFAULT_TRANS_SIZE from 1MB to 4MB (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix UBSAN array-index-out-of-bounds in decode_compress_ctxt() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: sleep interruptibly in the durable handle scavenger (Paulo Alcantara) [RHEL-190706]
  - ksmbd: start file id allocation at 1 (Paulo Alcantara) [RHEL-190706]
  - ksmbd: treat read-control opens as stat opens only for leases (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate :: stream type against directory create (Paulo Alcantara) [RHEL-190706]
  - ksmbd: break conflicting-open leases only as far as needed (Paulo Alcantara) [RHEL-190706]
  - ksmbd: break handle caching for share conflicts (Paulo Alcantara) [RHEL-190706]
  - ksmbd: normalize ungrantable lease states (Paulo Alcantara) [RHEL-190706]
  - ksmbd: return oplock protocol error for level II ack (Paulo Alcantara) [RHEL-190706]
  - ksmbd: avoid level II oplock break notification on unlink (Paulo Alcantara) [RHEL-190706]
  - ksmbd: downgrade oplock after break timeout (Paulo Alcantara) [RHEL-190706]
  - ksmbd: apply create security descriptor first (Paulo Alcantara) [RHEL-190706]
  - ksmbd: return requested create allocation size (Paulo Alcantara) [RHEL-190706]
  - ksmbd: tighten create file attribute validation (Paulo Alcantara) [RHEL-190706]
  - ksmbd: reject empty-attribute synchronize-only create (Paulo Alcantara) [RHEL-190706]
  - ksmbd: honor stream delete sharing for base file (Paulo Alcantara) [RHEL-190706]
  - ksmbd: send pending interim for last compound I/O (Paulo Alcantara) [RHEL-190706]
  - ksmbd: return success for deferred final close (Paulo Alcantara) [RHEL-190706]
  - ksmbd: preserve compound responses for chained errors (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate handle for create or get object id (Paulo Alcantara) [RHEL-190706]
  - ksmbd: propagate failed command status in related compounds (Paulo Alcantara) [RHEL-190706]
  - ksmbd: deny renaming directory with open children (Paulo Alcantara) [RHEL-190706]
  - ksmbd: check parent directory sharing conflicts on rename (Paulo Alcantara) [RHEL-190706]
  - ksmbd: preserve open change time across rename (Paulo Alcantara) [RHEL-190706]
  - ksmbd: handle durable v2 app instance id (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix durable reconnect context parsing (Paulo Alcantara) [RHEL-190706]
  - ksmbd: invalidate durable handles on oplock break (Paulo Alcantara) [RHEL-190706]
  - ksmbd: supersede disconnected delete-on-close durable handle (Paulo Alcantara) [RHEL-190706]
  - ksmbd: handle missing create contexts for lease opens (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE (Paulo Alcantara) [RHEL-190706]
  - ksmbd: keep common response iovecs in the work item (Paulo Alcantara) [RHEL-190706]
  - ksmbd: route v2 lease breaks on the client lease channel (Paulo Alcantara) [RHEL-190706]
  - ksmbd: break RH leases before delete-on-close (Paulo Alcantara) [RHEL-190706]
  - ksmbd: honor SMB2 v2 lease epochs (Paulo Alcantara) [RHEL-190706]
  - ksmbd: do not wait for RH lease break ack on overwrite (Paulo Alcantara) [RHEL-190706]
  - ksmbd: chain pending lease breaks before waking waiters (Paulo Alcantara) [RHEL-190706]
  - ksmbd: compute lease break-in-progress flag on response (Paulo Alcantara) [RHEL-190706]
  - ksmbd: treat unnamed DATA stream as base file (Paulo Alcantara) [RHEL-190706]
  - ksmbd: align SMB2 oplock break ack handling (Paulo Alcantara) [RHEL-190706]
  - ksmbd: share SMB2 lease state across opens (Paulo Alcantara) [RHEL-190706]
  - ksmbd: clean up lease response flags and directory leases (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix lease break and ack state handling (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use connection ClientGUID for lease lookup (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate SMB2 lease create contexts (Paulo Alcantara) [RHEL-190706]
  - smb/server: fix debug log endianness in smb2_cancel() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: track the connection owning a byte-range lock (Paulo Alcantara) [RHEL-190706]
  - smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use opener credentials for FSCTL mutations (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use opener credentials for ADS I/O (Paulo Alcantara) [RHEL-190706]
  - ksmbd: require source read access for duplicate extents (Paulo Alcantara) [RHEL-190706]
  - ksmbd: run set info with opener credentials (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use opener credentials for delete-on-close (Paulo Alcantara) [RHEL-190706]
  - ksmbd: serialize QUERY_DIRECTORY requests per file (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE (Paulo Alcantara) [RHEL-190706]
  - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION (Paulo Alcantara) [RHEL-190706]
  - ksmbd: reject non-VALID session in compound request branch (Paulo Alcantara) [RHEL-190706]
  - ksmbd: compress SMB2 READ responses (Paulo Alcantara) [RHEL-190706]
  - ksmbd: negotiate and decode SMB2 compression (Paulo Alcantara) [RHEL-190706]
  - cifs: negotiate chained SMB2 compression capabilities (Paulo Alcantara) [RHEL-190706]
  - smb: add common SMB2 compression transform helpers (Paulo Alcantara) [RHEL-190706]
  - smb: move LZ77 compression into common code (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
  - smb: server: remove code guarded by nonexistent config option (Paulo Alcantara) [RHEL-190706]
  - smb/server: fix incorrect file size in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
  - smb/server: get compression format in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
  - smb/server: implement FSCTL_SET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
  - smb/server: implement FSCTL_GET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
  - smb/server: get compression file attribute on open (Paulo Alcantara) [RHEL-190706]
  - smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-190706]
  - smb: remove duplicate server/smbfsctl.h (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in same_client_has_lease() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
  - smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-190706]
  - smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-190706]
  - smb/client: Fix error code in smb2_aead_req_alloc() (Paulo Alcantara) [RHEL-190706]
  - smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-190706]
  - smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-190706]
  - smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-190706]
  - smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-190706]
  - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-190706]
  - cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-190706]
  - smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-190706]
  - cifs: remove all cifs files before kill super (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-190706]
  - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-190706]
  - smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix uninitialized variable in smb2_writev_callback (Paulo Alcantara) [RHEL-190706]
  - smb: client: detect short folioq copy in cifs_copy_folioq_to_iter() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE (Paulo Alcantara) [RHEL-190706]
  - ksmbd: release ksmbd_inode ref via ksmbd_inode_put on lookup paths (Paulo Alcantara) [RHEL-190706]
  - ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Paulo Alcantara) [RHEL-190706]
  - smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate SID in parent security descriptor during ACL inheritance (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix durable reconnect error path file lifetime (Paulo Alcantara) [RHEL-190706]
  - smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-190706]
  - smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: divide, not multiply, milliseconds by 1000 (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix busy dentry used after unmounting (Paulo Alcantara) [RHEL-190706]
  - smb: client: use data_len for SMB2 READ encrypted folioq copy (Paulo Alcantara) [RHEL-190706]
  - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix undefined variables (Paulo Alcantara) [RHEL-190706]
  - smbdirect: Fix error cleanup in smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
  - smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-190706]
  - cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix null pointer dereference in compare_guid_key() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix null pointer dereference in proc_show_files() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow (Paulo Alcantara) [RHEL-190706]
  - SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-190706]
  - netfs, afs: Fix write skipping in dir/link writepages (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix netfs_read_folio() to wait on writeback (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix folio->private handling in netfs_perform_write() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix partial invalidation of streaming-write folio (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix leak of request in netfs_write_begin() error handling (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix early put of sink folio in netfs_read_gaps() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix write streaming disablement if fd open O_RDWR (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix read-gaps to remove netfs_folio from filled folio (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix potential deadlock in write-through mode (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix streaming write being overwritten (Paulo Alcantara) [RHEL-190706]
  - netfs: Defer the emission of trace_netfs_folio() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix overrun check in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
  - netfs: fix error handling in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix potential uninitialised var in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
  - netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix zeropoint update where i_size > remote_i_size (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix potential for tearing in ->remote_i_size and ->zero_point (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix netfs_read_to_pagecache() to pause on subreq failure (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix missing barriers when accessing stream->subrequests locklessly (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix missing locking around retry adding new subreqs (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix cancellation of a DIO and single read subrequests (Paulo Alcantara) [RHEL-190706]
  - smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-190706]
  - smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-190706]
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-190706]
  - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate inherited ACE SID length (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix kernel-doc warnings from ksmbd_conn_get/put() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fail share config requests when path allocation fails (Paulo Alcantara) [RHEL-190706]
  - ksmbd: close durable scavenger races against m_fp_list lookups (Paulo Alcantara) [RHEL-190706]
  - ksmbd: harden file lifetime during session teardown (Paulo Alcantara) [RHEL-190706]
  - ksmbd: centralize ksmbd_conn final release to plug transport leak (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: fix MR registration for coalesced SG lists (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce and use include/linux/smbdirect.h (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: make use of DEFAULT_SYMBOL_NAMESPACE and EXPORT_SYMBOL_GPL (Paulo Alcantara) [RHEL-190706]
  - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-190706]
  - smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-190706]
  - ksmbd: rewrite stop_sessions() with restartable iteration (Paulo Alcantara) [RHEL-190706]
  - smb: server: handle readdir_info_level_struct_sz() error (Paulo Alcantara) [RHEL-190706]
  - smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: move fs/smb/common/smbdirect/ to fs/smb/smbdirect/ (Paulo Alcantara) [RHEL-190706]
  - smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-190706]
  - smb: server: stop sending fake security descriptors (Paulo Alcantara) [RHEL-190706]
  - ksmbd: scope conn->binding slowpath to bound sessions only (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix CreateOptions sanitization clobbering the whole field (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix O(N^2) DoS in smb2_lock via unbounded LockCount (Paulo Alcantara) [RHEL-190706]
  - ksmbd: destroy async_ida in ksmbd_conn_free() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Paulo Alcantara) [RHEL-190706]
  - MAINTAINERS: create entry for smbdirect (Paulo Alcantara) [RHEL-190706]
  - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() (Paulo Alcantara) [RHEL-190706]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
  - smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in smb2_open during durable reconnect (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix max_connections off-by-one in tcp accept path (Paulo Alcantara) [RHEL-190706]
  - ksmbd: require minimum ACE size in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate response sizes in ipc_validate_msg() (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix active_num_conn leak on transport allocation failure (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect_connection_deregister_mr_io unlock while waiting (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: fix the logic in smbdirect_socket_destroy_sync() without an error (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: fix copyright header of smbdirect.h (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: change smbdirect_socket_parameters.{initiator_depth,responder_resources} to __u16 (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: remove unused SMBDIRECT_USE_INLINE_C_FILES logic (Paulo Alcantara) [RHEL-190706]
  - smb: server: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
  - smb: client: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce global workqueues (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: prepare use of dedicated workqueues for different steps (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: remove unused smbdirect_connection_mr_io_recovery_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: wrap rdma_disconnect() in rdma_[un]lock_handler() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
  - smb: server: remove unused ksmbd_transport_ops.prepare() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
  - smb: server: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_create_accepting()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_{socket_init_accepting,connection_wait_for_connected}() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
  - smb: server: let smb_direct_post_send_data() return data_length (Paulo Alcantara) [RHEL-190706]
  - smb: server: split out smb_direct_send_iter() out of smb_direct_writev() (Paulo Alcantara) [RHEL-190706]
  - smb: server: let smbdirect_map_sges_from_iter() truncate the message boundary (Paulo Alcantara) [RHEL-190706]
  - smb: server: inline smb_direct_create_header() into smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
  - smb: server: move iov_iter_kvec() out of smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of functions from smbdirect_rw.c (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_recv_io_refill[_work]() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
  - smb: client: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_create_kern()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_init_new() and smbdirect_connect_sync() (Paulo Alcantara) [RHEL-190706]
  - smb: client: introduce and use smbd_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
  - smb: client: introduce and use smbd_mr_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_send_{single_iter,immediate_work}() (Paulo Alcantara) [RHEL-190706]
  - smb: client: let smbd_post_send_full_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
  - smb: client: let smbd_post_send_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
  - smb: client: change smbd_post_send_empty() to void return (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of functions from smbdirect_mr.c (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: initialize recv_io->cqe.done = recv_done just once (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce the basic smbdirect.ko (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_bind() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: split out smbdirect_accept_negotiate_finish() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_init_send_batch_storage() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: provide explicit prototypes for cross .c file functions (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_public.h with prototypes (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect_internal.h define pr_fmt without SMBDIRECT_USE_INLINE_C_FILES (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect_socket.h include all headers for used structures (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_create_{kern,accepting}() and smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_accept_connect_request() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connect[_sync]() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect_socket_set_initial_parameters() call rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_init_{new,accepting}() and helpers (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_shutdown() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_is_connected() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_wait_for_connected() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_legacy_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_mr_io_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_negotiation_done() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_send_immediate_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_rdma_{established,event_handler}() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_destroy[_sync]() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_recv_io_done() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: define SMBDIRECT_RDMA_CM_[RNR_]RETRY (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: define SMBDIRECT_MIN_{RECEIVE,FRAGMENTED}_SIZE (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_rw.c with server rw code (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_mr.c with client mr code (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: split out smbdirect_connection_recv_io_refill() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_map_sges_from_iter() and helper functions (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.{send,recv}_io.mem.gfp_mask (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: set SMBDIRECT_KEEPALIVE_NONE before disable_delayed_work(&sc->idle.timer_work); (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_connection.c to be filled (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_schedule_cleanup[{_lvl,_status}]() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.c to be filled (Paulo Alcantara) [RHEL-190706]
  - smb: server: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
  - smb: client: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_internal.h (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-190706]
  - smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-190706]
  - smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-190706]
  - smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-190706]
  - smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-190706]
  - smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: add some logging to SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.logging infrastructure (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: let smbdirect.h include #include <linux/types.h> (Paulo Alcantara) [RHEL-190706]
  - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-190706]
  - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc (Paulo Alcantara) [RHEL-190706]
  - ksmbd: require 3 sub-authorities before reading sub_auth[2] (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate EaNameLength in smb2_get_ea() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
  - ksmbd: validate owner of durable handle on reconnect (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger (Paulo Alcantara) [RHEL-190706]
  - ksmbd: ipc: use kzalloc_flex and __counted_by (Paulo Alcantara) [RHEL-190706]
  - smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
  - smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
  - smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-190706]
  - vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
  - smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-190706]
  - smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-190706]
  - smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-190706]
  - vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
  - smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-190706]
  - smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
  - smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-190706]
  - smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-190706]
  - smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-190706]
  - smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-190706]
  - smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-190706]
  - smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-190706]
  - smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-190706]
  - smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-190706]
  - smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-190706]
  - smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-190706]
  - smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-190706]
  - smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
  - smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-190706]
  - smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-190706]
  - smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-190706]
  - fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix OOB write in QUERY_INFO for compound requests (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix the handling of stream->front by removing it (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Paulo Alcantara) [RHEL-190706]
  - smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-190706]
  - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix memory leaks and NULL deref in smb2_lock() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: do not expire session on binding failure (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix read abandonment during retry (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in durable v2 replay of active file handles (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free of share_conf in compound request (Paulo Alcantara) [RHEL-190706]
  - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION (Paulo Alcantara) [RHEL-190706]
  - ksmbd: unset conn->binding on failed binding request (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix share_conf UAF in tree_conn disconnect (Paulo Alcantara) [RHEL-190706]
  - cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-190706]
  - smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (Paulo Alcantara) [RHEL-190706]
  - ksmbd: Don't log keys in SMB3 signing and encryption key generation (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix use-after-free in smb2_open() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free by using call_rcu() for oplock_info (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix use-after-free in proc_show_files due to early rcu_read_unlock (Paulo Alcantara) [RHEL-190706]
  - smb/server: Fix another refcount leak in smb2_open() (Paulo Alcantara) [RHEL-190706]
  - cifs: open files should not hold ref on superblock (Paulo Alcantara) [RHEL-190706]
  - smb: update some doc references (Paulo Alcantara) [RHEL-190706]
  - smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-190706]
  - smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
  - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-190706]
  - netfs: Fix unbuffered/DIO writes to dispatch subrequests in strict sequence (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix signededness bug in smb_direct_prepare_negotiation() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-190706]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [cifs] (Paulo Alcantara) [RHEL-190706]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [cifs] (Paulo Alcantara) [RHEL-190706]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [cifs] (Paulo Alcantara) [RHEL-190706]
  - smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-190706]
  - smb: server: Remove duplicate include of misc.h (Paulo Alcantara) [RHEL-190706]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
  - smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-190706]
  - smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-190706]
  - smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix non-IPv6 build (Paulo Alcantara) [RHEL-190706]
  - smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-190706]
  - ksmbd: convert tree_conns_lock to rw_semaphore (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix missing chann_lock while iterating session channel list (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-190706]
  - smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-190706]
  - smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-190706]
  - smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-190706]
  - smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
  - smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-190706]
  - smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-190706]
  - smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-190706]
  - smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
  - smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
  - smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-190706]
  - cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-190706]
  - smb: server: correct value for smb_direct_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
  - smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() (Paulo Alcantara) [RHEL-190706]
  - ksmbd: add procfs interface for runtime monitoring and statistics (Paulo Alcantara) [RHEL-190706]
  - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
  - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
  - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-190706]
  - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
  - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-190706]
  - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-190706]
  - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-190706]
  - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-190706]
  - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-190706]
  - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-190706]
  - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-190706]
  - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
  - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
  - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
  - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
  - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
  - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-190706]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
  - cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-190706]
  - cifs: Fix cifs_dump_mids() to call ->dump_detail (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-190706]
  - cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-190706]
  - cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-190706]
  - smb: client: add multichannel async work for CONFIG_CIFS_DFS_UPCALL=n (Paulo Alcantara) [RHEL-190706]
  - smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-190706]
  - smb: server: reset smb_direct_port = SMB_DIRECT_PORT_INFINIBAND on init (Paulo Alcantara) [RHEL-190706]
  - ksmbd: smbd: fix dma_unmap_sg() nents (Paulo Alcantara) [RHEL-190706]
  - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-194153]
  - tls: Preserve sk_err across recvmsg() when data has been copied (Sabrina Dubroca) [RHEL-152729]
  - net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152729]
  - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152729]
  - net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152729]
  - net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152729]
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152729]
  - tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152729]
  - tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154841] {CVE-2026-23240}
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189560] {CVE-2025-40149}
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189578] {CVE-2025-71113}
  - e1000e: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
  - e1000: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
  - e1000e: Use __napi_schedule_irqoff() (Michal Schmidt) [RHEL-186602]
  - e1000e: use ktime_get_real_ns() in e1000e_systim_reset() (Michal Schmidt) [RHEL-186602]
  - net: Consistently define pci_device_ids using named initializers [e1000e] (Michal Schmidt) [RHEL-186602]
  - e1000e: Unroll PTP in probe error handling (Michal Schmidt) [RHEL-186602]
  - e1000: check return value of e1000_read_eeprom (Michal Schmidt) [RHEL-186602]
  - e1000/e1000e: Fix leak in DMA error cleanup (Michal Schmidt) [RHEL-186602]
  - e1000e: clear DPG_EN after reset to avoid autonomous power-gating (Michal Schmidt) [RHEL-186602]
  - e1000e: introduce new board type for Panther Lake PCH (Michal Schmidt) [RHEL-186602]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
  - e1000e: Switch to use %ptSp (Michal Schmidt) [RHEL-186602]
  - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186335]
  - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186335]
  - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186335]
  - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186335]
  - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186335]
  - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186335]
  - net: wwan: t7xx: Add delay between MD and SAP suspend (Jose Ignacio Tornos Martinez) [RHEL-155042]
  - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180156] {CVE-2026-46117}
  - dt-bindings: input: add debounce-delay-ms common property (Tony Camuso) [RHEL-176366]
  - dt-bindings: Update Sasha Finkelstein's email address (Tony Camuso) [RHEL-176366]
  - MIPS/input: Move RB532 button to GPIO descriptors (Tony Camuso) [RHEL-176366]
  - Input: uinput - take event lock when submitting FF request "event" (Tony Camuso) [RHEL-176366]
  - Input: uinput - fix circular locking dependency with ff-core (Tony Camuso) [RHEL-176366]
  - Input: aiptek - validate raw macro indices before updating state (Tony Camuso) [RHEL-176366]
  - Input: synaptics_usb - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
  - Input: appletouch - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
  - Input: keyspan-remote - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
  - Input: aiptek - use HID headers (Tony Camuso) [RHEL-176366]
  - Input: wm97xx - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
  - Input: mk712 - use guard notation when acquiring spinlock (Tony Camuso) [RHEL-176366]
  - Input: elo - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: matrix-keymap: fix key board wording (Tony Camuso) [RHEL-176366]
  - Input: atlas - check ACPI_COMPANION() against NULL (Tony Camuso) [RHEL-176366]
  - Input: atlas - convert ACPI driver to a platform one (Tony Camuso) [RHEL-176366]
  - input: trackpoint - Enable doubletap by default on capable devices (Tony Camuso) [RHEL-176366]
  - Input: psmouse - remove dedicated kpsmoused workqueue (Tony Camuso) [RHEL-176366]
  - Input: alps - use standard workqueue when registering supplemental device (Tony Camuso) [RHEL-176366]
  - Input: psmouse - replace flush_workqueue() with disable_delayed_work_sync() (Tony Camuso) [RHEL-176366]
  - Input: atkbd - fix various formatting issues (Tony Camuso) [RHEL-176366]
  - Input: atkbd - switch to using explicitly sized types (Tony Camuso) [RHEL-176366]
  - Input: atkbd - use dev_warn_ratelimited() (Tony Camuso) [RHEL-176366]
  - Input: atkbd - use __free() cleanup facility in when parsing FW keymap (Tony Camuso) [RHEL-176366]
  - Input: atkbd - validate scancode in firmware keymap entries (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: Add Parade TC3408 touchscreen controller (Tony Camuso) [RHEL-176366]
  - Input: export input_default_setkeycode (Tony Camuso) [RHEL-176366]
  - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
  - Input: bcm5974 - recover from failed mode switch (Tony Camuso) [RHEL-176366]
  - Input: libps2 - embed WARN_ON(1) macros into their enclosing if statements (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: qcom,pm8941-pwrkey: Document PMM8654AU (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: touchscreen: imagis: allow linux,keycodes for ist3038 (Tony Camuso) [RHEL-176366]
  - dt-bindings: Fix emails with spaces or missing brackets (Tony Camuso) [RHEL-176366]
  - docs: fix 're-use' -> 'reuse' in documentation (Tony Camuso) [RHEL-176366]
  - Input: gpio_keys - fall back to platform_get_irq() for interrupt-only keys (Tony Camuso) [RHEL-176366]
  - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (Tony Camuso) [RHEL-176366]
  - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (Tony Camuso) [RHEL-176366]
  - Documentation: use a source-read extension for the index link boilerplate (Tony Camuso) [RHEL-176366]
  - Input: appletouch - fix potential race between resume and open (Tony Camuso) [RHEL-176366]
  - dt-bindings: input: i2c-hid: Introduce FocalTech FT8112 (Tony Camuso) [RHEL-176366]
  - Input: synaptics_i2c - switch to using managed resources (Tony Camuso) [RHEL-176366]
  - Input: synaptics_i2c - guard polling restart in resume (Tony Camuso) [RHEL-176366]
  - kernel.h: drop hex.h and update all hex.h users (Tony Camuso) [RHEL-176366]
  - Input: serio - complete sizeof(*pointer) conversions (Tony Camuso) [RHEL-176366]
  - Input: elo - switch to use scnprintf() to suppress truncation warning (Tony Camuso) [RHEL-176366]
  - Input: adp5589 - remove a leftover header file (Tony Camuso) [RHEL-176366]
  - doc: input: fix typos in input.rst (Tony Camuso) [RHEL-176366]
  - Input: add ABS_SND_PROFILE (Tony Camuso) [RHEL-176366]
  - Input: psmouse-smbus - add WQ_UNBOUND to alloc_workqueue user (Tony Camuso) [RHEL-176366]
  - Input: synaptics_i2c - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
  - Input: gpio_keys - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (Tony Camuso) [RHEL-176366]
  - dt-bindings: Updates Linus Walleij's mail address (Tony Camuso) [RHEL-176366]
  - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
  - Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard (Tony Camuso) [RHEL-176366]
  - Input: cyapa - remove redundant pm_runtime_mark_last_busy() calls (Tony Camuso) [RHEL-176366]
  - Input: byd - use %*ph for Z packet dump (Tony Camuso) [RHEL-176366]
  - dt-bindings: Remove extra blank lines (Tony Camuso) [RHEL-176366]
  - dt-bindings: Update Krzysztof Kozlowski's email (Tony Camuso) [RHEL-176366]
  - dt-bindings: touchscreen: consolidate simple touch controller to trivial-touch.yaml (Tony Camuso) [RHEL-176366]
  - Input: MT - add INPUT_MT_TOTAL_FORCE flags (Tony Camuso) [RHEL-176366]
  - Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Tony Camuso) [RHEL-176366]
  - Input: add INPUT_PROP_HAPTIC_TOUCHPAD (Tony Camuso) [RHEL-176366]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10]
changelog:
  - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
  - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]
  - kselftest/arm64: Handle attempts to disable SM on SME only systems (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Test SME on SME only systems in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Cast start/end markers to char *, not u64 (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Cover disabling streaming mode without SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Don't open code SVE_PT_SIZE() in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Fix SVE write data generation for SME only systems (Steve Dunnagan) [RHEL-158921]
  - kselftest/arm64: Test FPSIMD format data writes via NT_ARM_SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
  - kselftst/arm64: Test NT_ARM_SVE FPSIMD format writes on non-SVE systems (Steve Dunnagan) [RHEL-158921]
  - arm64/sysreg: Replace TCR_EL1 field macros (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Represent physical memory with phys_addr_t and resource_size_t (Steve Dunnagan) [RHEL-158921]
  - arm64: mm: Make map_fdt() return mapped pointer (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: signal: Fix restoration of SVE context (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Steve Dunnagan) [RHEL-158921]
  - arm64/fpsimd: ptrace: Fix SVE writes on !SME systems (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() (Steve Dunnagan) [RHEL-158921]
  - arm64/gcs: Flush the GCS locking state on exec (Steve Dunnagan) [RHEL-158921]
  - arm64/sysreg: Remove unused define ARM64_FEATURE_FIELD_BITS (Steve Dunnagan) [RHEL-158921]
  - arm64/sme: Support disabling streaming mode via ptrace on SME only systems (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix typos and spelling errors in comments (Steve Dunnagan) [RHEL-158921]
  - arm64: Fix double word in comments (Steve Dunnagan) [RHEL-158921]
  - arm64: atomics: lse: Remove unused parameters from ATOMIC_FETCH_OP_AND macros (Steve Dunnagan) [RHEL-158921]
  - arm64: remove duplicate ARCH_HAS_MEM_ENCRYPT (Steve Dunnagan) [RHEL-158921]
  - arm64: add unlikely hint to MTE async fault check in el0_svc_common (Steve Dunnagan) [RHEL-158921]
  - arm64: acpi: add newline to deferred APEI warning (Steve Dunnagan) [RHEL-158921]
  - arm64/mm: Ensure PGD_SIZE is aligned to 64 bytes when PA_BITS = 52 (Steve Dunnagan) [RHEL-158921]
  - arm64/mm: Drop cpu_set_[default|idmap]_tcr_t0sz() (Steve Dunnagan) [RHEL-158921]
  - arm64: remove unused ARCH_PFN_OFFSET (Steve Dunnagan) [RHEL-158921]
  - arm64: use SOFTIRQ_ON_OWN_STACK for enabling softirq stack (Steve Dunnagan) [RHEL-158921]
  - arm64: Remove assertion on CONFIG_VMAP_STACK (Steve Dunnagan) [RHEL-158921]
  - uaccess: Provide ASM GOTO safe wrappers for unsafe_*_user() (Steve Dunnagan) [RHEL-158921]
  - arm64: uaccess: Use unsafe wrappers for ASM GOTO (Steve Dunnagan) [RHEL-158921]
  - igc: fix typos in comments (Michal Schmidt) [RHEL-186597]
  - igc: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-186597]
  - igc: skip RX timestamp header for frame preemption verification (Michal Schmidt) [RHEL-186597]
  - igc: fix potential skb leak in igc_fpe_xmit_smd_frame() (Michal Schmidt) [RHEL-186597]
  - igc: set tx buffer type for SMD frames (Michal Schmidt) [RHEL-186597]
  - net: Consistently define pci_device_ids using named initializers [igc] (Michal Schmidt) [RHEL-186597]
  - igc: fix page fault in XDP TX timestamps handling (Michal Schmidt) [RHEL-186597]
  - igc: fix missing update of skb->tail in igc_xmit_frame() (Michal Schmidt) [RHEL-186597]
  - igc: Fix trigger of incorrect irq in igc_xsk_wakeup function (Michal Schmidt) [RHEL-186597]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [igc] (Michal Schmidt) [RHEL-186597]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igc] (Michal Schmidt) [RHEL-186597]
  - igb: fix typos in comments (Michal Schmidt) [RHEL-177449]
  - igb: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-177449]
  - igb: use ktime_get_real helpers in igb_ptp_reset() (Michal Schmidt) [RHEL-177449]
  - net: Consistently define pci_device_ids using named initializers [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - igb: remove napi_synchronize() in igb_down() (Michal Schmidt) [RHEL-177449]
  - igb: Fix trigger of incorrect irq in igb_xsk_wakeup (Michal Schmidt) [RHEL-177449]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [igb] (Michal Schmidt) [RHEL-177449]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igb,igbvf] (Michal Schmidt) [RHEL-177449]
  - igb: Switch to use %ptSp (Michal Schmidt) [RHEL-177449]
  - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175863] {CVE-2024-53143}
  - scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141216] {CVE-2026-46105}
  - scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141216]
  - scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141215] {CVE-2026-43473}
  - scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141215]
  - scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141215]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-257.el10]
changelog:
  - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
  - wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
  - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
  - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
  - rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
  - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
  - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
  - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
  - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
  - PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
  - PCI: Align head space better (Myron Stowe) [RHEL-178011]
  - PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
  - parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
  - MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
  - resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
  - resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
  - resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
  - PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
  - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
  - resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
  - resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
  - kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
  - resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
  - resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
  - resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
  - resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
  - selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
  - dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
  - tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
  - tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
  - tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
  - tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
  - tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
  - tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
  - tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
  - net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
  - net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
  - selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
  - selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
  - redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-11
changelog:
  - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189377)
  - make sure documentation is updated during build for CVE-2023-52355 (RHEL-179103)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-74200, RHEL-80679, RHEL-104216, RHEL-104427, RHEL-113843
      RHEL-118671, RHEL-122751, RHEL-126854, RHEL-126945, RHEL-128105
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-104238)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.60.1-1
changelog:
  - Rebase to libguestfs 1.60.1
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.6-1
changelog:
  - Rebase to libnbd 1.25.6
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.7-1
changelog:
  - Rebase to libnbd 1.25.7
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057
  - Fix regression in nbd+ssh URIs caused by preceding change
    resolves: RHEL-217012


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.24.3-100
changelog:
  - Update to version 4.24.3
  - resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
    various flaws
  - resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
    in printing
  - resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
  - resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
    SAMR
  - resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


