# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-250.el10]
changelog:
  - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189660] {CVE-2026-23168}
  - PCI/TPH: Expose pcie_tph_get_st_table_loc() (CKI Backport Bot) [RHEL-186643]
  - PCI/TPH: Expose pcie_tph_get_st_table_size() (CKI Backport Bot) [RHEL-186643]
  - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-179033]
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-183513]
  - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-183513] {CVE-2026-31554}
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-183513] {CVE-2026-31555}
  - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-183513] {CVE-2026-23415}
  - tools: ynl: cli: order set->list conversion in JSON output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-route sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-addr sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ethtool sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert devlink sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add netdevsim wrapper library for YNL tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert tc and tc-filter-add samples to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert rt-link sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert ovs sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: convert netdev sample to selftest (Hangbin Liu) [RHEL-156508]
  - tools: ynl: move samples to tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add uns-admin-perm to genetlink (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Fill out operation attributes (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add sub-messages (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Update attribute sets (Hangbin Liu) [RHEL-156508]
  - doc/netlink: nftables: Add definitions (Hangbin Liu) [RHEL-156508]
  - doc/netlink: netlink-raw: Add max check (Hangbin Liu) [RHEL-156508]
  - tools: ynl: produce kselftest-list.txt from tests (Hangbin Liu) [RHEL-156508]
  - tools: ynl: support INSTALL_PATH in the tests Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests in /usr/bin/ (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rename TESTS variable to TEST_PROGS (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: make the output compact (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: Makefile's install target now installs ynltool (Hangbin Liu) [RHEL-156508]
  - tools/net/ynl: suppress jobserver warning in ynltool version detection (Hangbin Liu) [RHEL-156508]
  - tools: ynl: render event op docs correctly (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: print reply in combined format if possible (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: extract the event/notify handling in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: factor out --list-attrs / --doc handling (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: add --doc as alias to --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: improve --help (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: wrap the doc text if it's long (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: introduce formatting for attr names in --list-attrs (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: Fix remaining pylint warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint None, type, dict, generators, init (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: fix pylint warnings for returns, unused, redefined (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen-c: suppress unhelpful pylint messages (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint issues in ynl_gen_rst (Hangbin Liu) [RHEL-156508]
  - tools: ynl: ethtool: fix pylint issues (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix logic errors reported by pylint (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint global variable related warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint misc warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint dict, indentation, long lines, uninitialised (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint exception warnings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix pylint redefinition, encoding errors (Hangbin Liu) [RHEL-156508]
  - tools: ynl: pylint suppressions and docstrings (Hangbin Liu) [RHEL-156508]
  - tools: ynl: don't install tests (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev: clarify the page pool API a little (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix build on systems with old kernel headers (Hangbin Liu) [RHEL-156508]
  - ynl: samples: Fix spelling mistake "failedq" -> "failed" (Hangbin Liu) [RHEL-156508]
  - ynl: fix schema check errors (Hangbin Liu) [RHEL-156508]
  - ynl: fix a yamllint warning in ethtool spec (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add a lint makefile target (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add schema checking (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add big-endian byte-order for u32 IPv4 addresses (Hangbin Liu) [RHEL-156508]
  - tools: ynl: add YNL test framework (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: add function prefix argument (Hangbin Liu) [RHEL-156508]
  - ynl: samples: add tc filter example (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Display enum values in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Parse nested attributes in --list-attrs output (Hangbin Liu) [RHEL-156508]
  - tools: ynl: cli: Add --list-attrs option to show operation attributes (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: ignore *.d deps files (Hangbin Liu) [RHEL-156508]
  - netlink: specs: support ipv4-or-v6 for dual-stack fields (Hangbin Liu) [RHEL-156508]
  - tools: ynl: Add MAC address parsing support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: remove -lmnl from link flags (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: correct install in Makefile (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add traffic distribution balance (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add qstats support (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: add page-pool stats (Hangbin Liu) [RHEL-156508]
  - tools: ynltool: create skeleton for the C command (Hangbin Liu) [RHEL-156508]
  - tools: ynl: call nested attribute free function for indexed arrays (Hangbin Liu) [RHEL-156508]
  - netlink: specs: netdev add missing stats to qstat-get (Hangbin Liu) [RHEL-156508]
  - tools: ynl: rework the string representation of NlError (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix indent issues in the main Python lib (Hangbin Liu) [RHEL-156508]
  - tools: ynl: fix string attribute length to include null terminator (Hangbin Liu) [RHEL-156508]
  - tools: ynl: avoid print_field when there is no reply (Hangbin Liu) [RHEL-156508]
  - netlink: specs: explicitly declare block scalar strings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix if-idx attribute type (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fou: change local-v6/peer-v6 check (Hangbin Liu) [RHEL-156508]
  - netlink: specs: enforce strict naming of properties (Hangbin Liu) [RHEL-156508]
  - netlink: specs: tc: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: rt-link: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: ovs_flow: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - netlink: specs: nfsd: replace underscores with dashes in names (Hangbin Liu) [RHEL-156508]
  - docs: netlink: index.rst: add a netlink index file (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix a couple of yamllint warnings (Hangbin Liu) [RHEL-156508]
  - netlink: specs: wrap long doc lines (>80 chars) (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up indentation errors (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up truthy values (Hangbin Liu) [RHEL-156508]
  - netlink: specs: fix up spaces before comments (Hangbin Liu) [RHEL-156508]
  - netlink: specs: clean up spaces in brackets (Hangbin Liu) [RHEL-156508]
  - netlink: specs: add doc start markers to yaml (Hangbin Liu) [RHEL-156508]
  - netlink: specs: mptcp: fix missing doc (Hangbin Liu) [RHEL-156508]
  - tools: ynl-gen: use big-endian netlink attribute types (Hangbin Liu) [RHEL-156508]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-251.el10]
changelog:
  - s390/sclp: Allow PCI reports for NVMe SMART data (Jan Polensky) [RHEL-188089]
  - riscv: mm: Fix conflict in arch_tlbbatch_add_pending() (Jennifer Berringer) [RHEL-212287]
  - arm64: dts: s32g3: Fix SWT8 watchdog address (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Jared Kangas) [RHEL-212089]
  - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Jared Kangas) [RHEL-212089]
  - iio: core: fix uninitialized data in debugfs (Jared Kangas) [RHEL-212089]
  - iio: buffer: Move from int64_t to s64 for timestamp (Jared Kangas) [RHEL-212089]
  - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Jared Kangas) [RHEL-212089]
  - iio: Replace 'sign' field with union in struct iio_scan_type (Jared Kangas) [RHEL-212089]
  - iio: buffer: ensure repeat alignment is a power of two (Jared Kangas) [RHEL-212089]
  - iio: buffer: cache timestamp offset in scan buffer (Jared Kangas) [RHEL-212089]
  - iio: buffer: check return value of iio_compute_scan_bytes() (Jared Kangas) [RHEL-212089]
  - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Jared Kangas) [RHEL-212089]
  - iio: core: Simplify IIO core managed APIs (Jared Kangas) [RHEL-212089]
  - iio: inkern: call iio_device_put() only on mapped devices (Jared Kangas) [RHEL-212089]
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Jared Kangas) [RHEL-212089]
  - dmaengine: of_dma: Add devm_of_dma_controller_register() (Jared Kangas) [RHEL-212089]
  - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: drop unused module alias (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Jared Kangas) [RHEL-212089]
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Jared Kangas) [RHEL-212089]
  - i2c: imx: zero-initialize dma_slave_config for eDMA (Jared Kangas) [RHEL-212089]
  - i2c: imx: ensure no clock is generated after last read (Jared Kangas) [RHEL-212089]
  - i2c: imx: fix i2c issue when reading multiple messages (Jared Kangas) [RHEL-212089]
  - i2c: imx: preserve error state in block data length handler (Jared Kangas) [RHEL-212089]
  - vsock: initialize child_ns_mode_locked in vsock_net_init() (Stefano Garzarella) [RHEL-155388]
  - ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-191988]
  - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193520] {CVE-2026-52973}
  - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-193670]
  - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-193670]
  - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-193670]
  - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-193670]
  - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-193670]
  - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-193670]
  - hwmon: Add label support for 64-bit energy attributes (Jared Kangas) [RHEL-193670]
  - hwmon: Introduce 64-bit energy attribute support (Jared Kangas) [RHEL-193670]
  - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-210979]
  - pwm: Add the S32G support in the Freescale FTM driver (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Drop driver local locking (Jared Kangas) [RHEL-210979]
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Jared Kangas) [RHEL-210979]
  - selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-189741]
  - Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-189741]
  - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-190427]
  - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-190428]
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189607] {CVE-2025-71147}
  - gpio: pca953x: propagate regulator_enable() error from resume (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: mask interrupts in irq shutdown (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: pca953x: clarify interrupt source detection (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TCAL6408 TCAL6416 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: gpio-pca95xx: Add tcal6408 and tcal6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: add TCAL6408 and TCAL6416 (Jared Kangas) [RHEL-190842]
  - Documentation: gpio: Add a compatibility and feature list for PCA953x (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: clarify log messages about auto increment feature (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-190842]
  - gpio: Kconfig: Update help for GPIO_PCA953X (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use regmap_update_bits() to improve performance (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for TI TCA6418 (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add TI TCA6418 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-190842]
  - dt-bindings: gpio: pca95xx: add Toradex ecgpiol16 (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: use value returning setters (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-190842]
  - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-190842]
  - crypto: testmgr - Ignore EEXIST on shash allocation (Thomas Huth) [RHEL-153093]
  - crypto: api - Redo lookup on EEXIST (Thomas Huth) [RHEL-153093]
  - sched_ext: Convert scx_dump_state() spinlock to raw spinlock (Herton R. Krzesinski) [RHEL-184683]
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179292] {CVE-2026-46099}
  - dt-bindings: rtc: pcf85063: remove quartz-load-femtofarads restriction for nxp,pcf85063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: scope pcf85063_config structures (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: convert from round_rate() to determine_rate() (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: fix incorrect maximum clock rate handling (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: add support for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: create pcf85063_i2c_probe (CKI Backport Bot) [RHEL-190843]
  - dt-bindings: rtc: pcf85063: add binding for RV8063 (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: replace dev_err+return with return dev_err_probe (CKI Backport Bot) [RHEL-190843]
  - rtc: pcf85063: do a SW reset if POR failed (CKI Backport Bot) [RHEL-190843]
  - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188778] {CVE-2025-54518}
  - cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E (Mark Langsdorf) [RHEL-185959]
  - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189653] {CVE-2026-23110}
  - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-183433]
  - iommu: Warn on premature unblock during DMA aliased sibling reset (Eder Zulian) [RHEL-188931]
  - iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset (Eder Zulian) [RHEL-188931] {CVE-2026-52952}
  - iommu: Fix ATS invalidation timeouts during __iommu_remove_group_pasid() (Eder Zulian) [RHEL-188931]
  - iommu: Fix nested pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done() (Eder Zulian) [RHEL-188931]
  - iommu: Replace per-group resetting_domain with per-gdev blocked flag (Eder Zulian) [RHEL-188931]
  - iommu: Fix kdocs of pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() (Eder Zulian) [RHEL-188931]
  - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188552] {CVE-2026-53059}
  - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188465] {CVE-2026-53016}
  - crypto: qat - clear AES key schedule from stack (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - cancel work on re-enable SR-IOV timeout (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use 2-arg strscpy where destination size is known (Vladislav Dronov) [RHEL-115836]
  - PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - validate RSA CRT component lengths (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - simplify adf_service_mask_to_string helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add KPT support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use pci logging variants for PCI-specific messages (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - protect service table iterations with service_lock (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix restarting state leak on allocation failure (Vladislav Dronov) [RHEL-115836]
  - Documentation: qat_rl: make rate limiting wording clearer (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - handle sysfs-triggered reset callbacks (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - factor out AER reset helpers (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - skip restart for down devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - centralize bus master enable (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - notify fatal error before AER reset preparation (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - keep VFs enabled during reset (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove MODULE_VERSION (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - rename adf_ctl_drv.c to adf_module.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - remove unused character device and IOCTLs (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix heartbeat error injection (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix IRQ cleanup on 6xxx probe failure (Vladislav Dronov) [RHEL-115836] {CVE-2026-46060}
  - crypto: qat - use swab32 macro (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - replace scnprintf() with sysfs_emit() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix type mismatch in RAS sysfs show functions (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix compression instance leak (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - use acomp_tfm_ctx() (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 420xx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - disable 4xxx AE cluster when lead engine is fused off (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add anti-rollback support for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - add wireless mode support for QAT GEN6 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix firmware loading failure for GEN6 devices (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - fix indentation of macros in qat_hal.c (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Drop redundant local variables (Vladislav Dronov) [RHEL-115836]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [partial] (Vladislav Dronov) [RHEL-115836]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [partial] (Vladislav Dronov) [RHEL-115836]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [partial] (Vladislav Dronov) [RHEL-115836]
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Vladislav Dronov) [RHEL-115836]
  - zstd: Import upstream v1.5.7 (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - convert to common field_get() helper (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - #undef field_get() before local definition (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add non-constant field_{prep,get}() helpers (Vladislav Dronov) [RHEL-115836]
  - bitfield: Add less-checking __FIELD_{GET,PREP}() (Vladislav Dronov) [RHEL-115836]
  - bitfield: Ensure the return values of helper functions are checked (Vladislav Dronov) [RHEL-115836]
  - crypto: qat - Remove dst_null support (Vladislav Dronov) [RHEL-115836]
  - qat: don't mess with ->d_name (Vladislav Dronov) [RHEL-115836]
  - lib/string_choices: Rearrange functions in sorted order (Vladislav Dronov) [RHEL-115836]
  - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178253]
  - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178253]
  - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178253]
  - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178253] {CVE-2026-31635}
  - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31633}
  - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-31632}
  - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178253] {CVE-2026-31631}
  - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178253] {CVE-2026-46039}
  - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178253] {CVE-2026-46085}
  - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178253] {CVE-2026-46012}
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178253]
  - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178253] {CVE-2026-43500}
  - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178253] {CVE-2026-46000}
  - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178253] {CVE-2026-31676}
  - Revert "Disable CET when calling tboot shutdown procedure." (Tony Camuso) [RHEL-177961]
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179862] {CVE-2026-46227}
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172678] {CVE-2026-43038}
  - efi: Allow to expose the workqueue via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - workqueue: Allow to expose ordered workqueues via sysfs (Luis Claudio R. Goncalves) [RHEL-175660]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174199] {CVE-2026-43186}
  - redhat: disable XEN_PRIVCMD and XENFS (Vitaly Kuznetsov) [RHEL-172496] {CVE-2026-31788 CVE-2026-31787}
  - selftests: fib_nexthops: test stale has_v4 on nexthop replace (Guillaume Nault) [RHEL-152711]
  - nexthop: fix IPv6 route referencing IPv4 nexthop (Guillaume Nault) [RHEL-152711]
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (Guillaume Nault) [RHEL-152711]
  - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump (Guillaume Nault) [RHEL-152711]
  - icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152711]
  - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152711]
  - net: ipv4: fix ARM64 alignment fault in multipath hash seed (Guillaume Nault) [RHEL-152711]
  - selftests: net: add ICMP error source address test over xfrm tunnel (Guillaume Nault) [RHEL-152711]
  - icmp: fix ICMP error source address when xfrm policy matches (Guillaume Nault) [RHEL-152711]
  - icmp: prevent possible overflow in icmp_global_allow() (Guillaume Nault) [RHEL-152711]
  - ping: annotate data-races in ping_lookup() (Guillaume Nault) [RHEL-152711]
  - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (Guillaume Nault) [RHEL-152711]
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152711]
  - inet: ping: Fix icmp out counting (Guillaume Nault) [RHEL-152711]
  - selftests: fib_nexthops: Add test cases for error routes deletion (Guillaume Nault) [RHEL-152711]
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152711]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (Guillaume Nault) [RHEL-152711]
  - inet: frags: add inet_frag_queue_flush() (Guillaume Nault) [RHEL-152711]
  - inet: frags: avoid theoretical race in ip_frag_reinit() (Guillaume Nault) [RHEL-152711]
  - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168076] {CVE-2026-31419}
  - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names (David Thompson) [RHEL-167064]
  - page_pool: store detach_time as ktime_t to avoid false-negatives (Paolo Abeni) [RHEL-152734]
  - net: Fix rcu_tasks stall in threaded busypoll (Paolo Abeni) [RHEL-152734]
  - net: consume xmit errors of GSO frames (Paolo Abeni) [RHEL-152734]
  - net: Drop the lock in skb_may_tx_timestamp() (Paolo Abeni) [RHEL-152734]
  - net: remove WARN_ON_ONCE when accessing forward path array (Paolo Abeni) [RHEL-152734]
  - net: gro: fix outer network offset (Paolo Abeni) [RHEL-152734]
  - net: add proper RCU protection to /proc/net/ptype (Paolo Abeni) [RHEL-152734]
  - linkwatch: use __dev_put() in callers to prevent UAF (Paolo Abeni) [RHEL-152734]
  - net: fix segmentation of forwarding fraglist GRO (Paolo Abeni) [RHEL-152734]
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Paolo Abeni) [RHEL-152734]
  - net: update netdev_lock_{type,name} (Paolo Abeni) [RHEL-152734]
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Paolo Abeni) [RHEL-152734]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Paolo Abeni) [RHEL-152734]
  - net: gro: clear skb_shinfo(skb)->hwtstamps in napi_reuse_skb() (Paolo Abeni) [RHEL-152734]
  - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS (Paolo Abeni) [RHEL-152734]
  - net: dst_metadata: fix IP_DF bit not extracted from tunnel headers (Paolo Abeni) [RHEL-152734]
  - netlink: support dumping IPv4 multicast addresses (Hangbin Liu) [RHEL-123730]


author: Clark Williams <williams@redhat.com> - 2.3.1-1
changelog:
  - Fix build require of annobin package
  - Update all files with SPDX identifier
  - add srpm target in Makefile
  - fix versioning in Makefile targets and specfile


author: Clark Williams <williams@redhat.com> - 2.4-1
changelog:
  - Makefile cleanups and added .gitignore
  - remove Red Hat Makefile targets and specfile
  - ensure all files have valid SPDX license identifiers
  - version bump


author: Clark Williams <williams@redhat.com> - 2.5-1
changelog:
  - Bump release for RHEL-10
    Resolves: RHEL-40030
  - add rpminspect.yaml to turn of debuginfo check
  - add compile options for passing annocheck


author: John Kacur <jkacur@redhat.com> - 3.8.12
changelog:
  - Add patch to put stress-ng options in their own manpage section
  - Change constant name earlystop TO EARLYSTOP
  - Update the kcompile kernel to linux-6.12-rc4
  Resolves: RHEL-63611


author: John Kacur <jkacur@redhat.com> - 3.9-3
changelog:
  - Make the default interval for timerlat in rteval 1100us
  - Make cyclictest the default measurement module for rteval
  Resolves: RHEL-78395


author: John Kacur <jkacur@redhat.com> - 3.9-5
changelog:
  - Make timerlat the default measurement module
  - Make the default interval 100us
  Resolves: RHEL-97541


author: John Kacur <jkacur@redhat.com> - 3.9-6
changelog:
  - Convert spec file to use pyproject.toml build system
  - Add 8 patches from upstream (spelling fixes, typo corrections, cleanups)
  - Modernize packaging with %pyproject_wheel and %pyproject_install macros
  Resolves: RHEL-114900


author: John Kacur <jkacur@redhat.com> - 3.10-1
changelog:
  - Update to rteval-3.10
  - set rtla timerlat dma latency to 0 to be more consistent with cyclictest
  - Create a commandline switch for rteval to use cyclictest
  - Update rteval-loads requirement to >= 6.17.7-1
  Resolves: RHEL-82915, RHEL-116596, RHEL-114927


author: Anubhav Shelat <ashelat@redhat.com> - 3.8-5
changelog:
  - Add options for timerlat tracing in rteval, and store timerlat summary in rteval summary xml file.
  - Convert base64 data to text before wrapping.
  - Add sysreport to gating tests and check the exit status.
  Resolves: RHEL-44438


author: John Kacur <jkacur@redhat.com> - 3.8-7
changelog:
  - Rename some patches
  - Add timerlat tracing
  - Add Fix-aNone being pass to cyclictest
  Resolves: RHEL-35462


author: Crystal Wood <crwood@redhat.com> - 3.8-8
changelog:
  - Prevent using cyclictest and timerlat and the same time
  - Add a --noload option
  - Switch to autosetup
  Resolves: RHEL-35507
  Resolves: RHEL-50324


author: Anubhav Shelat <ashelat@redhat.com> - 3.8-9
changelog:
  - Add functionality to allow user to execute cpupower tool to 
  set idle state depth  while running rteval.
  - Disable latency trick by using --default-system option with 
  cyclictest when setting idle state depth. 
  Resolves: RHEL-37646


author: John Kacur <jkacur@redhat.com> - 3.8-11
changelog:
  - Restore all load module options
  - Change the default kernel to linux-6.10.5-rteval
  - Fix parsing in kcompile for the correct kernel to compile
  Resolves: RHEL-54310


author: John Kacur <jkacur@redhat.com> - 1.6-1
changelog:
  -Upgrade the kernel to linux-5.18.1.tar.xz
  - Update the version number to sync more closely with rhel and CENTOS


author: John Kacur <jkacur@redhat.com> - 1.6-12
changelog:
  - Create a kernel based off of linux-6.10.5 and three upstream patches
    to remove a dependency on deprecated <openssl/engine.h>
  Resolves: RHEL-47107


author: John Kacur <jkacur@redhat.com> - 1.6-13
changelog:
  - Update to linux-6.12-rc4 which contains the patches
    to remove dependency on deprecated <openssl/engine.h>
  Resolves: RHEL-63613


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version
  Resolves: RHEL-86702


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.27.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-123608
    - cpu-partitioning: autodetect dracut hook directory, systemd workaround
      resolves: RHEL-40619
    - openshift: optimize TCP settings for high throughput and low latency
    - profiles: Set boost=1 in *-performance profiles
    - sap-hana: force latency to 70 us, not to C-states
      resolves: RHEL-142285
    - man: fixed instance_acquire_devices example in tuned-adm man
      resolves: RHEL-90575
    - spec: use correct python interpreter for documentation installation
    - sysctl: add reapply_sysctl_exclude option
    - ppd: ask tuned recommend for base profile


